cilium: chart-native metrics Service, attended helm upgrade (REN-166) #1032

Merged

Ghost merged 2 commits from atlas/ren-166-cilium-verdict-metric into master 2026-10-05 00:01:56 +00:00

Conversation 5 Commits 2 Files Changed 2

+16 -103

2 Commits

Author	SHA1	Message	Date
atlas-botandClaude Opus 5.5	df5e425b7c	fix(cilium): drop cilium_policy_verdict_total, not a cilium 1.20.2 metric (REN-166) ... Argus's review of PR #1032: the name exists in neither pkg/ nor the metrics docs for 1.20.2, and the agent skips unknown --metrics names silently. Zeus dropped it from scope. metricsService, the Service delete and the new selector stay. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-26 15:08:42 +00:00
atlas-botandClaude Opus 5.5	c7e61e7dce	feat(cilium): enable cilium_policy_verdict_total, chart owns the metrics Service (REN-166) ... - prometheus.metrics: +cilium_policy_verdict_total (opt-in; per-direction policy verdict attribution on top of cilium_drop_count_total). - prometheus.metricsService: true, so the chart renders the headless `cilium-agent` metrics Service. - Drop the hand-declared `cilium-agent-metrics` Service from cilium-servicemonitor.yaml and point the ServiceMonitor at the chart's Service, so the endpoints are scraped once, not twice. This is a values change: helm-controller upgrades the CNI release, the cilium-config `metrics` key changes, and the reloader annotation rolls the agents node by node. Merge only inside the window Zeus set on REN-166. Revert: git revert this commit; Flux restores the old Service and selector and rolls the agents back the same way. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-26 15:03:58 +00:00