snow-flow 1.1.76 → 1.1.78

package/k8s/monitoring.yaml

@@ -1,515 +0,0 @@
-# Monitoring stack for ServiceNow MCP services
-# Prometheus deployment
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: prometheus
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: prometheus
-    app.kubernetes.io/component: monitoring
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: prometheus
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: prometheus
-        app.kubernetes.io/component: monitoring
-    spec:
-      serviceAccountName: mcp-monitoring-account
-      containers:
-      - name: prometheus
-        image: prom/prometheus:v2.45.0
-        ports:
-        - containerPort: 9090
-          name: web
-        args:
-        - '--config.file=/etc/prometheus/prometheus.yml'
-        - '--storage.tsdb.path=/prometheus'
-        - '--web.console.libraries=/etc/prometheus/console_libraries'
-        - '--web.console.templates=/etc/prometheus/consoles'
-        - '--storage.tsdb.retention.time=30d'
-        - '--storage.tsdb.retention.size=50GB'
-        - '--web.enable-lifecycle'
-        - '--web.enable-admin-api'
-        resources:
-          requests:
-            memory: "1Gi"
-            cpu: "500m"
-          limits:
-            memory: "2Gi"
-            cpu: "1000m"
-        volumeMounts:
-        - name: prometheus-config
-          mountPath: /etc/prometheus
-        - name: prometheus-data
-          mountPath: /prometheus
-        livenessProbe:
-          httpGet:
-            path: /-/healthy
-            port: 9090
-          initialDelaySeconds: 30
-          periodSeconds: 30
-        readinessProbe:
-          httpGet:
-            path: /-/ready
-            port: 9090
-          initialDelaySeconds: 5
-          periodSeconds: 5
-      volumes:
-      - name: prometheus-config
-        configMap:
-          name: prometheus-config
-      - name: prometheus-data
-        persistentVolumeClaim:
-          claimName: prometheus-data-pvc
----
-# Prometheus Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: prometheus
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: prometheus
-    app.kubernetes.io/component: monitoring
-spec:
-  type: ClusterIP
-  ports:
-  - port: 9090
-    targetPort: 9090
-    protocol: TCP
-    name: web
-  selector:
-    app.kubernetes.io/name: prometheus
----
-# Prometheus PVC
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: prometheus-data-pvc
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: prometheus
-    app.kubernetes.io/component: monitoring
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 100Gi
-  storageClassName: fast-ssd
----
-# Prometheus Configuration
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: prometheus-config
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: prometheus
-    app.kubernetes.io/component: monitoring
-data:
-  prometheus.yml: |
-    global:
-      scrape_interval: 30s
-      evaluation_interval: 30s
-      external_labels:
-        cluster: 'servicenow-mcp'
-        environment: 'production'
-
-    rule_files:
-    - "/etc/prometheus/rules/*.yml"
-
-    alerting:
-      alertmanagers:
-      - static_configs:
-        - targets:
-          - alertmanager:9093
-
-    scrape_configs:
-    # Prometheus self-monitoring
-    - job_name: 'prometheus'
-      static_configs:
-      - targets: ['localhost:9090']
-
-    # MCP Services
-    - job_name: 'mcp-services'
-      kubernetes_sd_configs:
-      - role: endpoints
-        namespaces:
-          names:
-          - servicenow-mcp
-      relabel_configs:
-      - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape]
-        action: keep
-        regex: true
-      - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_path]
-        action: replace
-        target_label: __metrics_path__
-        regex: (.+)
-      - source_labels: [__address__, __meta_kubernetes_service_annotation_prometheus_io_port]
-        action: replace
-        regex: ([^:]+)(?::\d+)?;(\d+)
-        replacement: $1:$2
-        target_label: __address__
-      - action: labelmap
-        regex: __meta_kubernetes_service_label_(.+)
-      - source_labels: [__meta_kubernetes_namespace]
-        action: replace
-        target_label: kubernetes_namespace
-      - source_labels: [__meta_kubernetes_service_name]
-        action: replace
-        target_label: kubernetes_name
-
-    # Infrastructure services
-    - job_name: 'consul'
-      static_configs:
-      - targets: ['consul:8500']
-      metrics_path: '/v1/agent/metrics'
-      params:
-        format: ['prometheus']
-
-    - job_name: 'redis'
-      static_configs:
-      - targets: ['redis:6379']
-
-    - job_name: 'neo4j'
-      static_configs:
-      - targets: ['neo4j:2004']
-      metrics_path: '/metrics'
-
-    # Kubernetes monitoring
-    - job_name: 'kubernetes-apiservers'
-      kubernetes_sd_configs:
-      - role: endpoints
-      scheme: https
-      tls_config:
-        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
-      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
-      relabel_configs:
-      - source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]
-        action: keep
-        regex: default;kubernetes;https
-
-    - job_name: 'kubernetes-nodes'
-      kubernetes_sd_configs:
-      - role: node
-      scheme: https
-      tls_config:
-        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
-      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
-      relabel_configs:
-      - action: labelmap
-        regex: __meta_kubernetes_node_label_(.+)
-      - target_label: __address__
-        replacement: kubernetes.default.svc:443
-      - source_labels: [__meta_kubernetes_node_name]
-        regex: (.+)
-        target_label: __metrics_path__
-        replacement: /api/v1/nodes/${1}/proxy/metrics
-
-  rules.yml: |
-    groups:
-    - name: mcp-services
-      rules:
-      # High CPU usage
-      - alert: MCPServiceHighCPU
-        expr: rate(container_cpu_usage_seconds_total{namespace="servicenow-mcp"}[5m]) > 0.8
-        for: 2m
-        labels:
-          severity: warning
-        annotations:
-          summary: "MCP Service {{ $labels.pod }} has high CPU usage"
-          description: "CPU usage is above 80% for more than 2 minutes"
-
-      # High memory usage
-      - alert: MCPServiceHighMemory
-        expr: container_memory_usage_bytes{namespace="servicenow-mcp"} / container_spec_memory_limit_bytes > 0.9
-        for: 2m
-        labels:
-          severity: warning
-        annotations:
-          summary: "MCP Service {{ $labels.pod }} has high memory usage"
-          description: "Memory usage is above 90% for more than 2 minutes"
-
-      # Service down
-      - alert: MCPServiceDown
-        expr: up{job="mcp-services"} == 0
-        for: 1m
-        labels:
-          severity: critical
-        annotations:
-          summary: "MCP Service {{ $labels.instance }} is down"
-          description: "Service has been down for more than 1 minute"
-
-      # High error rate
-      - alert: MCPServiceHighErrorRate
-        expr: rate(http_requests_total{job="mcp-services",status=~"5.."}[5m]) / rate(http_requests_total{job="mcp-services"}[5m]) > 0.1
-        for: 2m
-        labels:
-          severity: warning
-        annotations:
-          summary: "MCP Service {{ $labels.instance }} has high error rate"
-          description: "Error rate is above 10% for more than 2 minutes"
-
----
-# Grafana deployment
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: grafana
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: grafana
-    app.kubernetes.io/component: monitoring
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: grafana
-        app.kubernetes.io/component: monitoring
-    spec:
-      serviceAccountName: mcp-monitoring-account
-      securityContext:
-        fsGroup: 472
-        runAsUser: 472
-      containers:
-      - name: grafana
-        image: grafana/grafana:10.0.0
-        ports:
-        - containerPort: 3000
-          name: web
-        env:
-        - name: GF_SECURITY_ADMIN_USER
-          valueFrom:
-            secretKeyRef:
-              name: monitoring-credentials
-              key: GRAFANA_ADMIN_USER
-        - name: GF_SECURITY_ADMIN_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: monitoring-credentials
-              key: GRAFANA_ADMIN_PASSWORD
-        - name: GF_USERS_ALLOW_SIGN_UP
-          value: "false"
-        - name: GF_SERVER_DOMAIN
-          value: "localhost"
-        - name: GF_SMTP_ENABLED
-          value: "false"
-        resources:
-          requests:
-            memory: "256Mi"
-            cpu: "250m"
-          limits:
-            memory: "512Mi"
-            cpu: "500m"
-        volumeMounts:
-        - name: grafana-data
-          mountPath: /var/lib/grafana
-        - name: grafana-config
-          mountPath: /etc/grafana/provisioning
-        livenessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 60
-          periodSeconds: 30
-        readinessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 10
-          periodSeconds: 10
-      volumes:
-      - name: grafana-data
-        persistentVolumeClaim:
-          claimName: grafana-data-pvc
-      - name: grafana-config
-        configMap:
-          name: grafana-config
----
-# Grafana Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: grafana
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: grafana
-    app.kubernetes.io/component: monitoring
-spec:
-  type: ClusterIP
-  ports:
-  - port: 3000
-    targetPort: 3000
-    protocol: TCP
-    name: web
-  selector:
-    app.kubernetes.io/name: grafana
----
-# Grafana PVC
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: grafana-data-pvc
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: grafana
-    app.kubernetes.io/component: monitoring
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 10Gi
-  storageClassName: standard
----
-# Grafana Configuration
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: grafana-config
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: grafana
-    app.kubernetes.io/component: monitoring
-data:
-  datasources.yml: |
-    apiVersion: 1
-    datasources:
-    - name: Prometheus
-      type: prometheus
-      access: proxy
-      url: http://prometheus:9090
-      isDefault: true
-      editable: true
-
-  dashboards.yml: |
-    apiVersion: 1
-    providers:
-    - name: 'ServiceNow MCP Dashboards'
-      orgId: 1
-      folder: 'ServiceNow MCP'
-      type: file
-      disableDeletion: false
-      updateIntervalSeconds: 10
-      allowUiUpdates: true
-      options:
-        path: /var/lib/grafana/dashboards
-
----
-# AlertManager deployment (optional but recommended)
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: alertmanager
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: alertmanager
-    app.kubernetes.io/component: monitoring
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: alertmanager
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: alertmanager
-        app.kubernetes.io/component: monitoring
-    spec:
-      serviceAccountName: mcp-monitoring-account
-      containers:
-      - name: alertmanager
-        image: prom/alertmanager:v0.26.0
-        ports:
-        - containerPort: 9093
-          name: web
-        args:
-        - '--config.file=/etc/alertmanager/alertmanager.yml'
-        - '--storage.path=/alertmanager'
-        - '--web.external-url=http://localhost:9093'
-        resources:
-          requests:
-            memory: "128Mi"
-            cpu: "100m"
-          limits:
-            memory: "256Mi"
-            cpu: "200m"
-        volumeMounts:
-        - name: alertmanager-config
-          mountPath: /etc/alertmanager
-        - name: alertmanager-data
-          mountPath: /alertmanager
-      volumes:
-      - name: alertmanager-config
-        configMap:
-          name: alertmanager-config
-      - name: alertmanager-data
-        emptyDir: {}
----
-# AlertManager Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: alertmanager
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: alertmanager
-    app.kubernetes.io/component: monitoring
-spec:
-  type: ClusterIP
-  ports:
-  - port: 9093
-    targetPort: 9093
-    protocol: TCP
-    name: web
-  selector:
-    app.kubernetes.io/name: alertmanager
----
-# AlertManager Configuration
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: alertmanager-config
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: alertmanager
-    app.kubernetes.io/component: monitoring
-data:
-  alertmanager.yml: |
-    global:
-      smtp_smarthost: 'localhost:587'
-      smtp_from: 'alertmanager@servicenow-mcp.local'
-
-    route:
-      group_by: ['alertname']
-      group_wait: 10s
-      group_interval: 10s
-      repeat_interval: 1h
-      receiver: 'web.hook'
-
-    receivers:
-    - name: 'web.hook'
-      webhook_configs:
-      - url: 'http://localhost:5001/'
-        send_resolved: true
-
-    inhibit_rules:
-    - source_match:
-        severity: 'critical'
-      target_match:
-        severity: 'warning'
-      equal: ['alertname', 'dev', 'instance']

package/k8s/namespace.yaml

@@ -1,80 +0,0 @@
-# Kubernetes namespace for ServiceNow MCP services
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: servicenow-mcp
-  labels:
-    name: servicenow-mcp
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: namespace
-    app.kubernetes.io/version: "1.0.0"
-    app.kubernetes.io/managed-by: kubectl
-  annotations:
-    description: "ServiceNow Multi-Agent MCP Services"
-    contact: "devops@company.com"
----
-# Network policies for security
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: mcp-network-policy
-  namespace: servicenow-mcp
-spec:
-  podSelector: {}
-  policyTypes:
-  - Ingress
-  - Egress
-  ingress:
-  # Allow traffic within namespace
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          name: servicenow-mcp
-  # Allow traffic from ingress controller
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          name: ingress-nginx
-  # Allow traffic from monitoring namespace
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          name: monitoring
-  egress:
-  # Allow all outbound traffic (for ServiceNow API calls)
-  - {}
----
-# Resource quotas
-apiVersion: v1
-kind: ResourceQuota
-metadata:
-  name: mcp-resource-quota
-  namespace: servicenow-mcp
-spec:
-  hard:
-    requests.cpu: "10"
-    requests.memory: 20Gi
-    limits.cpu: "20"
-    limits.memory: 40Gi
-    pods: "50"
-    services: "20"
-    persistentvolumeclaims: "10"
----
-# Limit ranges
-apiVersion: v1
-kind: LimitRange
-metadata:
-  name: mcp-limit-range
-  namespace: servicenow-mcp
-spec:
-  limits:
-  - default:
-      memory: "512Mi"
-      cpu: "500m"
-    defaultRequest:
-      memory: "256Mi"
-      cpu: "250m"
-    type: Container
-  - default:
-      storage: "10Gi"
-    type: PersistentVolumeClaim