Skip to content

Conversation

chrkl
Copy link
Member

@chrkl chrkl commented Aug 12, 2025

How to categorize this PR?

/area monitoring
/kind enhancement

What this PR does / why we need it:

Collect apiserver_validating_admission_policy_check_total by shoot Prometheus to allow shoot owners to monitor their admission policies.

The metric is recommended to monitor the Validating Admission Policy, which has been graduated to GA with Kubernetes 1.30. See https://kubernetes.io/blog/2024/04/24/validating-admission-policy-ga/#set-up-monitoring

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:
/cc @istvanballok @vicwicker
Release note:

Collect `apiserver_validating_admission_policy_check_total` metric by shoot Prometheus.

Collect apiserver_validating_admission_policy_check_total by shoot
Prometheus to allow shoot owners to monitor their admission policies.
@gardener-prow gardener-prow bot added area/monitoring Monitoring (including availability monitoring and alerting) related kind/enhancement Enhancement, improvement, extension cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Aug 12, 2025
Copy link
Member

@istvanballok istvanballok left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-prow gardener-prow bot added the lgtm Indicates that a PR is ready to be merged. label Aug 12, 2025
Copy link
Contributor

gardener-prow bot commented Aug 12, 2025

LGTM label has been added.

Git tree hash: 96351aa0e67e14ec26b5e87757472cf97e3ebab4

@chrkl
Copy link
Member Author

chrkl commented Aug 14, 2025

/assign @tobschli

Copy link
Member

@tobschli tobschli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you very much! 😊
In the docs there is als apiserver_validating_admission_policy_check_duration_seconds_bucket mentioned.
When I tried out this PR, I could not see this metric.
Do we collect it? Do we want to collect it?

Otherwise I don't see anything not to merge this
/lgtm

@chrkl
Copy link
Member Author

chrkl commented Aug 14, 2025

Thank you very much! 😊 In the docs there is als apiserver_validating_admission_policy_check_duration_seconds_bucket mentioned. When I tried out this PR, I could not see this metric. Do we collect it? Do we want to collect it?

The main purpose of this PR is to allow shoot owners to federate the whitelisted metric to their own monitoring stack. As long as we do not visualize this in our dashboards, I would not collect a (possibly large) histogram metric and keep this change minimal.

@tobschli
Copy link
Member

All right!
Thank you for the explanation 😊
/approve

Copy link
Contributor

gardener-prow bot commented Aug 14, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: istvanballok, tobschli

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-prow gardener-prow bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 14, 2025
@gardener-prow gardener-prow bot merged commit 893dd2d into gardener:master Aug 14, 2025
19 checks passed
@chrkl chrkl deleted the allow-admission-policy-check branch August 14, 2025 14:34
Duciwuci pushed a commit to stackitcloud/gardener that referenced this pull request Sep 1, 2025
Collect apiserver_validating_admission_policy_check_total by shoot
Prometheus to allow shoot owners to monitor their admission policies.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. area/monitoring Monitoring (including availability monitoring and alerting) related cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. kind/enhancement Enhancement, improvement, extension lgtm Indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants