You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/essentials/prometheus-remote-write-managed-identity.md
+23-22Lines changed: 23 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Remote-write in Azure Monitor Managed Service for Prometheus (preview)
3
3
description: Describes how to configure remote-write to send data from self-managed Prometheus running in your AKS cluster or Azure Arc-enabled Kubernetes cluster using managed identity authentication.
4
4
author: bwren
5
5
ms.topic: conceptual
6
-
ms.date: 10/17/2022
6
+
ms.date: 10/20/2022
7
7
---
8
8
9
9
# Azure Monitor managed service for Prometheus remote write - managed identity (preview)
@@ -32,7 +32,7 @@ Data for Azure Monitor managed service for Prometheus is stored in an [Azure Mon
32
32
33
33
34
34
## Locate AKS node resource group
35
-
The node resource group of the AKS contains resources that you will require for other steps in this process. This resource group has the name `MC_<AKS-RESOURCE-GROUP>_<AKS-CLUSTER-NAME>_<REGION>`. You can locate it from the **Resource groups** menu in the Azure portal. Start by making sure that you can locate this resource group since other steps below will refer to it.
35
+
The node resource group of the AKS cluster contains resources that you will require for other steps in this process. This resource group has the name `MC_<AKS-RESOURCE-GROUP>_<AKS-CLUSTER-NAME>_<REGION>`. You can locate it from the **Resource groups** menu in the Azure portal. Start by making sure that you can locate this resource group since other steps below will refer to it.
36
36
37
37
:::image type="content" source="media/prometheus-remote-write-managed-identity/resource-groups.png" alt-text="Screenshot showing list of resource groups." lightbox="media/prometheus-remote-write-managed-identity/resource-groups.png":::
38
38
@@ -43,7 +43,7 @@ Get the **Client ID** from the **Overview** page of your [managed identity](../.
43
43
44
44
:::image type="content" source="media/prometheus-remote-write-managed-identity/client-id.png" alt-text="Screenshot showing client ID on overview page of managed identity." lightbox="media/prometheus-remote-write-managed-identity/client-id.png":::
45
45
46
-
Instead of creating your own ID, you can use one of the identities created by AKS, which are listed in [Use a managed identity in Azure Kubernetes Service](../../aks/use-managed-identity.md). This procedure will use the `Kubelet` identity. The name of this identity will be `<AKS-CLUSTER-NAME>-agentpool` and located in the node resource group of the AKS cluster.
46
+
Instead of creating your own ID, you can use one of the identities created by AKS, which are listed in [Use a managed identity in Azure Kubernetes Service](../../aks/use-managed-identity.md). This article uses the `Kubelet` identity. The name of this identity will be `<AKS-CLUSTER-NAME>-agentpool` and located in the node resource group of the AKS cluster.
47
47
48
48
:::image type="content" source="media/prometheus-remote-write-managed-identity/resource-group-details.png" alt-text="Screenshot showing list of resources in the node resource group." lightbox="media/prometheus-remote-write-managed-identity/resource-group-details.png":::
49
49
@@ -76,12 +76,12 @@ The managed identity requires the *Monitoring Metrics Publisher* role on the dat
76
76
77
77
78
78
## Grant AKS cluster access to the identity
79
-
This step isn't required if you're using an AKS identity since it will already has access to the cluster.
79
+
This step isn't required if you're using an AKS identity since it will already have access to the cluster.
80
80
81
81
> [!IMPORTANT]
82
82
> You must have owner/user access administrator access on the cluster.
83
83
84
-
1. Identify the virtual machine scale sets in the node resource group for your AKS cluster.
84
+
1. Identify the virtual machine scale sets in the [node resource group](#locate-aks-node-resource-group) for your AKS cluster.
85
85
86
86
:::image type="content" source="media/prometheus-remote-write-managed-identity/resource-group-details-virtual-machine-scale-sets.png" alt-text="Screenshot showing virtual machine scale sets in the node resource group." lightbox="media/prometheus-remote-write-managed-identity/resource-group-details-virtual-machine-scale-sets.png":::
87
87
@@ -94,17 +94,7 @@ This step isn't required if you're using an AKS identity since it will already h
94
94
95
95
## Deploy Side car and configure remote write on the Prometheus server
96
96
97
-
1. Copy the YAML below and save to a file, replacing the following values.
98
-
99
-
| Value | Description |
100
-
|:---|:---|
101
-
| `<AKS-CLUSTER-NAME>` | Name of your AKS cluster |
102
-
| `<CONTAINER-IMAGE-VERSION>` | `mcr.microsoft.com/azuremonitor/prometheus/promdev/prom-remotewrite:prom-remotewrite-20221012.2`<br>This is the remote write container image version. |
103
-
| `<INGESTION-URL>` | **Metrics ingestion endpoint** from the **Overview** page for the Azure Monitor workspace. |
104
-
| `<MANAGED-IDENTITY-CLIENT-ID>` | - **Client ID** from the **Overview** page for the managed identity |
105
-
| `<CLUSTER-NAME>` | Name of the cluster Prometheus is running on |
106
-
107
-
This YAML assumes you're using 8081 as your listening port. Modify that value if you use a different port.
97
+
1. Copy the YAML below and save to a file. This YAML assumes you're using 8081 as your listening port. Modify that value if you use a different port.
108
98
109
99
```yml
110
100
prometheus:
@@ -147,8 +137,22 @@ This step isn't required if you're using an AKS identity since it will already h
147
137
```
148
138
149
139
150
-
2. Open Azure Cloud Shell and upload the YAML file.
151
-
3. Use helm to apply the YAML file to update your Prometheus configuration with the following CLI commands.
140
+
2. Replace the following values in the YAML.
141
+
142
+
| Value | Description |
143
+
|:---|:---|
144
+
| `<AKS-CLUSTER-NAME>` | Name of your AKS cluster |
145
+
| `<CONTAINER-IMAGE-VERSION>` | `mcr.microsoft.com/azuremonitor/prometheus/promdev/prom-remotewrite:prom-remotewrite-20221012.2`<br>This is the remote write container image version. |
146
+
| `<INGESTION-URL>` | **Metrics ingestion endpoint** from the **Overview** page for the Azure Monitor workspace |
147
+
| `<MANAGED-IDENTITY-CLIENT-ID>` | **Client ID** from the **Overview** page for the managed identity |
148
+
| `<CLUSTER-NAME>` | Name of the cluster Prometheus is running on |
149
+
150
+
151
+
152
+
153
+
154
+
3. Open Azure Cloud Shell and upload the YAML file.
155
+
4. Use helm to apply the YAML file to update your Prometheus configuration with the following CLI commands.
152
156
153
157
```azurecli
154
158
# set context to your cluster
@@ -162,7 +166,4 @@ This step isn't required if you're using an AKS identity since it will already h
162
166
163
167
## Next steps
164
168
165
-
- [Use preconfigured alert rules for your Kubernetes cluster](../containers/container-insights-metric-alerts.md).
166
-
- [Learn more about the Azure alerts](../alerts/alerts-types.md).
167
-
- [Prometheus documentation for recording rules](https://aka.ms/azureprometheus-promio-recrules).
168
-
- [Prometheus documentation for alerting rules](https://aka.ms/azureprometheus-promio-alertrules).
169
+
- [Learn more about Azure Monitor managed service for Prometheus](../prometheus-metrics-overview.md).
0 commit comments