Custom fpm metrics. Add metric exporter to local and deployment. (#669)

* Local - add fpm exporter container.

* Add fpm exporter to our build & deployment

* Add lines to end of files.

* Add status endpoint to nginx - block at ingress level.

* Remove fpm-exporter

* Simplify by blocking by IP in server.conf.

* Update server.conf

* Add podmonitor to intranet-dev

* Add network policy for prometheus.

.github/workflows/build.yml

@@ -49,7 +49,7 @@ jobs:
           
           docker image build -t $REGISTRY/$REPOSITORY:cron-$IMAGE_TAG \
             --target build-cron .
-        
+
           # ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░  ░░
           
           docker image push $REGISTRY/$REPOSITORY:fpm-$IMAGE_TAG

deploy/config/local/nginx/server.conf

@@ -254,4 +254,12 @@ server {
         fastcgi_pass fpm;
     }
 
+    # On local this can be accessed without restriction.
+    location = /status {        
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_pass fpm;
+    }
+
 }

deploy/config/php-pool.conf

@@ -13,6 +13,7 @@ pm.min_spare_servers = 5;
 pm.max_spare_servers = 20;
 pm.max_requests = 500;
 pm.max_children = 20;
+pm.status_path = /status;
 
 [global]
 daemonize = no

deploy/config/server.conf

@@ -256,4 +256,16 @@ server {
         fastcgi_pass fpm;
     }
 
+    location = /status {
+        # Group 3 is set to the internal Cloud Platform IP range.
+        if ( $ip_group != 3 ) {
+            add_header Content-Type text/plain;
+            return 401;
+        }
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_pass fpm;
+    }
+
 }

deploy/development/deployment.tpl.yml

@@ -32,6 +32,7 @@ spec:
           image: ${ECR_URL}:${IMAGE_TAG_NGINX}
           ports:
             - containerPort: 8080
+              name: nginx-port
           volumeMounts:
             - name: uploads
               mountPath: /var/www/html/public/app/uploads

deploy/development/network-policy.yml

@@ -0,0 +1,16 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-prometheus-scraping
+  namespace: intranet-dev
+spec:
+  podSelector:
+    matchLabels:
+      app: intranet-dev
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          component: monitoring

deploy/development/pod-monitor.yml

@@ -0,0 +1,13 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: intranet-dev
+  namespace: intranet-dev
+spec:
+  selector:
+    matchLabels:
+      app: intranet-dev
+  podMetricsEndpoints:
+  - port: nginx-port
+    path: "/status?openmetrics"
+    interval: 15s