Deploying

Container image

docker pull registry.deckhouse.io/k8s-image-availability-exporter/k8s-image-availability-exporter:latest

Helm Chart

Prometheus integration

Prometheus

-job_name:image-availability-exporterhonor_labels:truemetrics_path:'/metrics'scheme:httpkubernetes_sd_configs:  -role:podnamespaces:names:      -kube-systemrelabel_configs:  -source_labels:[__meta_kubernetes_pod_label_app]regex:image-availability-exporteraction:keep

prometheus-operator

apiVersion:monitoring.coreos.com/v1kind:PodMonitormetadata:name:image-availability-exporternamespace:kube-systemspec:podMetricsEndpoints:  -port:http-metricsscheme:httphonorLabels:truescrapeTimeout:10sselector:matchLabels:app:image-availability-exporternamespaceSelector:matchNames:    -kube-system

Alerting

Prometheus

groups:  -alert:DeploymentImageUnavailableexpr:|      max by (namespace, name, container, image) (        k8s_image_availability_exporter_available{kind="deployment"} == 0      )annotations:message:>        Image {{`{{ $labels.image }}`}} from container {{`{{ $labels.container }}`}}        in deployment {{`{{ $labels.name }}`}}        from namespace {{`{{ $labels.namespace }}`}}        is not available in docker registry.labels:severity:critical  -alert:StatefulSetImageUnavailableexpr:|      max by (namespace, name, container, image) (        k8s_image_availability_exporter_available{kind="statefulset"} == 0      )annotations:message:>        Image {{`{{ $labels.image }}`}} from container {{`{{ $labels.container }}`}}        in statefulSet {{`{{ $labels.name }}`}}        from namespace {{`{{ $labels.namespace }}`}}        is not available in docker registry.labels:severity:critical  -alert:DaemonSetImageUnavailableexpr:|      max by (namespace, name, container, image) (        k8s_image_availability_exporter_available{kind="daemonset"} == 0      )annotations:message:>        Image {{`{{ $labels.image }}`}} from container {{`{{ $labels.container }}`}}        in daemonSet {{`{{ $labels.name }}`}}        from namespace {{`{{ $labels.namespace }}`}}        is not available in docker registry.labels:severity:critical  -alert:CronJobImageUnavailableexpr:|      max by (namespace, name, container, image) (        k8s_image_availability_exporter_available{kind="cronjob"} == 0      )annotations:message:>        Image {{`{{ $labels.image }}`}} from container {{`{{ $labels.container }}`}}        in cronJob {{`{{ $labels.name }}`}}        from namespace {{`{{ $labels.namespace }}`}}        is not available in docker registry.labels:severity:critical

Configuration

Command-line options

Usage of k8s-image-availability-exporter:  -allow-plain-http    whether to fallback to HTTP scheme for registries that don't support HTTPS  -bind-address string    address:port to bind /metrics endpoint to (default ":8080")  -capath value    path to a file that contains CA certificates in the PEM format  -check-interval duration    image re-check interval (default 1m0s)  -default-registry string    default registry to use in absence of a fully qualified image name, defaults to "index.docker.io"  -force-check-disabled-controllers value    comma-separated list of controller kinds for which image is forcibly checked, even when workloads are disabled or suspended. Acceptable values include "Deployment", "StatefulSet", "DaemonSet", "Cronjob" or "*" for all kinds (this option is case-insensitive)  -ignored-images string    tilde-separated image regexes to ignore, each image will be checked against this list of regexes  -image-mirror value    Add a mirror repository (format: original=mirror)  -namespace-label string    namespace label for checks  -skip-registry-cert-verification    whether to skip registries' certificate verification

Metrics

Compatibility