Skip to main content
Usage history comes from a Prometheus or VictoriaMetrics in the cluster. Where a cluster has neither, Lumovi offers to install a small Prometheus that collects only what Lumovi charts: CPU, memory and network use, and restarts. It’s one Helm release in a namespace of its own. You see every object before anything is made, and removing it leaves nothing in the cluster. It’s sized for small clusters. If you already run Prometheus or VictoriaMetrics, use that instead.

When it’s offered

Where a chart would be, No Prometheus found means Lumovi looked and found no source. Under it, Lumovi says “Or let Lumovi install a small one: you review everything it makes first.”, with the button Install a metrics stack…. There’s no button when:
  • The cluster is read-only. It says “Lumovi can install a small one, once the cluster isn’t read-only.”
  • You’re not one of Lumovi’s admins, on a server. See Who may install it.
  • A policy turns it off. Then it isn’t mentioned at all. See Turning it off.
It isn’t offered where history is turned off for the cluster, or where a source was found or chosen but doesn’t answer.

Installing it

1

Open the dialog

Choose Install a metrics stack…. The dialog says what will run, how much history it keeps, how to remove it, and which chart and images it uses. The values it’s installed with shows the chart’s values. They can’t be changed here.If the cluster doesn’t let you create something the stack needs, the dialog names what’s missing, and Review is disabled.
2

Review

Review asks the API server to check the install without making anything (helm install --dry-run=server). Lumovi then shows every object it would make, as manifest: the namespace first, then the chart’s 11 objects. Back returns to the summary.
3

Install

Install is offered only after the review. Lumovi makes the namespace, then installs the release.The cluster pulls the two images and starts Prometheus. Meanwhile, the charts say “The metrics stack is starting…”. They fill in a minute or two after Prometheus is up.
If the install fails, Lumovi undoes it: it uninstalls the release and deletes the namespace it made, and the error ends with “Nothing of it is left.” If undoing fails too, the error says where to look for what may be left. If the stack is installed but its pods don’t come up within three minutes, or the cluster says why they can’t (an image it can’t pull, a quota, a pod it refused), the charts say The metrics stack isn’t starting, with the reasons the pods give. Lumovi keeps checking, and Remove… takes it out again. Where the cluster has more than 100 nodes or 3,000 pods, the dialog warns that the stack is sized for small clusters. Its Prometheus may run out of memory and restart, and its storage may hold less than a week. A cluster that size is better served by a Prometheus set up for it.

What it installs

Where the chart and images come from

The chart is built into Lumovi, so Lumovi downloads nothing to install it. It’s the archive the chart’s repository publishes, unchanged, with this SHA-256:
Lumovi checks that checksum before every review and install, and installs nothing if it doesn’t match. The cluster pulls the images itself, each by its digest:
Lumovi doesn’t verify the images’ signatures. A cluster that can’t reach quay.io and registry.k8s.io can’t start the stack.

What it can read

The stack has two cluster roles, both read-only: Neither can read Secrets, ConfigMaps or Services, and neither can change anything. Prometheus collects from two places, and keeps only these series:
  • Each node’s kubelet (cAdvisor), for the containers of pods only, not the node as a whole or its system services: container_cpu_usage_seconds_total, container_cpu_cfs_periods_total, container_cpu_cfs_throttled_periods_total, container_memory_working_set_bytes, container_network_receive_bytes_total and container_network_transmit_bytes_total.
  • kube-state-metrics: kube_pod_info, kube_pod_container_status_restarts_total and kube_pod_container_status_last_terminated_reason.
Everything else is dropped as it’s collected. That’s what the Metrics page, the Metrics tabs and Right-sizing chart from.

Who can read what it collects

Lumovi asks Prometheus through the API server, with your own credentials. To see charts, an account needs get on services/proxy in lumovi-metrics, and list on services across the cluster to find it. See Permissions. Two things are worth knowing before you install it:
  • Anyone with that permission can query every namespace’s usage. Prometheus doesn’t know about namespaces’ RBAC. The series carry the names of pods, containers, images and nodes, and pods’ IP addresses.
  • Workloads inside the cluster can query it too. Prometheus has no sign-in, and the stack has no NetworkPolicy, so a pod in any namespace can reach its service. Nothing is exposed outside the cluster. The install dialog says so too. If that matters in your cluster, add a NetworkPolicy to lumovi-metrics, or run a Prometheus of your own.
Both are how a Prometheus in a cluster usually behaves. Nobody can change or delete what it holds over HTTP: its admin and lifecycle endpoints are off.

History and storage

  • 7 days of history, in at most 3 GB. When it’s full, the oldest goes first.
  • It’s kept in an emptyDir limited to 4 GiB, on the disk of the node Prometheus runs on. There’s no volume claim.
  • History starts over when the pod is replaced or moves to another node: after a node drain, an eviction, or the pod running out of memory.
  • Samples are taken every 30 seconds.
Right-sizing needs a day of history before it recommends anything, and is surest with a week.

Who may install it

Installing and removing run as you, so the cluster’s RBAC decides. Your account must be allowed to create (to remove: delete):
  • namespaces, cluster roles and cluster role bindings;
  • Deployments, Services, service accounts, ConfigMaps and Secrets in lumovi-metrics.
Anyone whose account the cluster allows, unless your organization’s policy turns it off.
AI assistants can’t install or remove it. The audit log records each install as helm.install and each removal as helm.uninstall, with who did it, the chart, its version, repository and SHA-256, and whether it worked or was refused. Reviews aren’t recorded, since they make nothing.

Removing it

Open Metrics source from the chip on any chart, or from the command palette. Under Lumovi’s metrics stack, choose Remove…, type lumovi-metrics to confirm, and choose Remove. Lumovi uninstalls the release, deletes the namespace, and waits until it’s gone. Nothing of it stays in the cluster: not the cluster roles, and not the history. If Helm’s record of the release is gone, Lumovi deletes the release’s two cluster roles and their bindings itself. The charts go back to having no history.
Deleting the namespace deletes everything in it, including anything put there since. Don’t put anything of your own in lumovi-metrics.
Lumovi removes only what it installed. It tells by the namespace’s label:
  • A namespace named lumovi-metrics without the label isn’t Lumovi’s. Lumovi installs nothing there, and doesn’t offer to remove it. Delete or rename it to install the stack.
  • Remove… isn’t offered for a Prometheus you installed yourself.
To remove it without Lumovi:

Turning it off

In your organization’s policy:
policy.json
Lumovi then doesn’t offer the stack, and refuses to install or remove one.
A stack that’s already installed keeps running, and Lumovi keeps charting from it. Remove it first, or with helm and kubectl as above.

Using your own Prometheus instead

Lumovi’s stack is the small option. Your own Prometheus or VictoriaMetrics is the better one when:
  • the cluster is large, or you want more than a week of history;
  • history should survive a pod restart, on a persistent volume;
  • you want alerts, dashboards, or metrics beyond what Lumovi charts.
Lumovi finds most installations on its own, and you can point it at any service that answers PromQL. See How Lumovi finds it and Choosing the source. If you install your own after Lumovi’s, remove Lumovi’s stack, so the cluster doesn’t collect the same things twice.

Usage history

What Lumovi charts, and where it finds it.

Right-sizing

What each workload should request, from a week of history.