improvements: ApplicationSet ignoreDifferences(SS VCT) + vmauth drop unauthorized_user

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
wbsong111
2026-06-25 15:16:21 +09:00
parent 14fb0d214a
commit 7ddb1f062d
5 changed files with 40 additions and 25 deletions
@@ -93,6 +93,13 @@ spec:
destination:
server: https://kubernetes.default.svc
namespace: monitoring
# StatefulSet volumeClaimTemplates는 immutable + K8s가 volumeMode 등 기본값을 자동 주입 →
# 영구 OutOfSync 방지(vmstorage/vlstorage). VCT 변경은 어차피 적용 불가라 무시.
ignoreDifferences:
- group: apps
kind: StatefulSet
jsonPointers:
- /spec/volumeClaimTemplates
syncPolicy:
automated:
prune: true
@@ -16,5 +16,4 @@ config:
headers:
- "AccountID: {{.LogsAccountID}}"
- "ProjectID: 0"
unauthorized_user:
url_prefix: "http://vmcluster-victoria-metrics-cluster-vmselect.monitoring.svc.cluster.local:8481/select/0/prometheus"
# unauthorized_user 미설정: 미인증 요청은 401(account 0 무인증 접근 차단).