Prometheus support

Big picture

Calico Enterprise uses the open-source Prometheus monitoring and alerting toolkit. With these tools, you can view time-series metrics from Calico Enterprise components in the Prometheus and Grafana interfaces, or scrape the metrics for a BYO Prometheus deployment.

Install options

Use Prometheus operator managed by Tigera operator

You install the Calico Enterprise Prometheus operator and CRDs during Calico Enterprise installation. Calico Enterprise metrics and alerts are available in Manager UI. You configure alerts through Prometheus AlertManager.

If you want to specify your own Prometheus operator during installation for management by the Tigera operator, the required operator version must be v0.40.0 or higher. Because Calico Enterprise creates AlertManager and Prometheus CRs in the tigera-prometheus namespace, all you need to do is verify that your Prometheus operator is configured to manage Prometheus and AlertManager instances in the tigera-prometheus namespace.

Prometheus on Calico Enterprise for Windows

By default, the Windows firewall blocks listening on ports. For Calico Enterprise to manage the Prometheus metrics ports Windows firewall rules, enable the windowsManageFirewallRules setting in FelixConfiguration:

kubectl patch felixConfiguration default --type merge --patch '{"spec": {"windowsManageFirewallRules": "Enabled"}}'

See the FelixConfiguration reference for more details. You can also add a Windows firewall rule that allows listening on the Prometheus ports instead of having Calico Enterprise manage it.

Bring your own Prometheus

For details, see Bring your own Prometheus.