Secure MCP Server

global: scrape_interval: 15s evaluation_interval: 15s external_labels: cluster: 'secure-mcp' environment: 'production' alerting: alertmanagers: - static_configs: - targets: - alertmanager:9093 rule_files: - '/etc/prometheus/alerts.yml' scrape_configs: - job_name: 'prometheus' static_configs: - targets: ['localhost:9090'] labels: service: 'prometheus' - job_name: 'secure-mcp-server' metrics_path: '/metrics' static_configs: - targets: ['secure-mcp:3000'] labels: service: 'mcp-server' component: 'application' relabel_configs: - source_labels: [__address__] target_label: instance regex: '([^:]+)(?::\d+)?' replacement: '${1}' - job_name: 'node-exporter' static_configs: - targets: ['node-exporter:9100'] labels: service: 'node-exporter' component: 'infrastructure' - job_name: 'cadvisor' static_configs: - targets: ['cadvisor:8080'] labels: service: 'cadvisor' component: 'containers' - job_name: 'postgresql' static_configs: - targets: ['postgres:9187'] labels: service: 'postgresql' component: 'database' - job_name: 'redis' static_configs: - targets: ['redis-exporter:9121'] labels: service: 'redis' component: 'cache' - job_name: 'vault' metrics_path: '/v1/sys/metrics' params: format: ['prometheus'] static_configs: - targets: ['vault:8200'] labels: service: 'vault' component: 'secrets' - job_name: 'kubernetes-apiservers' kubernetes_sd_configs: - role: endpoints scheme: https tls_config: ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token relabel_configs: - source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name] action: keep regex: default;kubernetes;https - job_name: 'kubernetes-nodes' kubernetes_sd_configs: - role: node scheme: https tls_config: ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token relabel_configs: - action: labelmap regex: __meta_kubernetes_node_label_(.+) - job_name: 'kubernetes-pods' kubernetes_sd_configs: - role: pod relabel_configs: - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape] action: keep regex: true - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path] action: replace target_label: __metrics_path__ regex: (.+) - source_labels: [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port] action: replace regex: ([^:]+)(?::\d+)?;(\d+) replacement: $1:$2 target_label: __address__ - action: labelmap regex: __meta_kubernetes_pod_label_(.+) - source_labels: [__meta_kubernetes_namespace] action: replace target_label: kubernetes_namespace - source_labels: [__meta_kubernetes_pod_name] action: replace target_label: kubernetes_pod_name - job_name: 'kubernetes-services' kubernetes_sd_configs: - role: service metrics_path: /probe params: module: [http_2xx] relabel_configs: - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_probe] action: keep regex: true - source_labels: [__address__] target_label: __param_target - target_label: __address__ replacement: blackbox-exporter:9115 - source_labels: [__param_target] target_label: instance - action: labelmap regex: __meta_kubernetes_service_label_(.+) - source_labels: [__meta_kubernetes_namespace] target_label: kubernetes_namespace - source_labels: [__meta_kubernetes_service_name] target_label: kubernetes_name - job_name: 'jaeger' static_configs: - targets: ['jaeger:14269'] labels: service: 'jaeger' component: 'tracing' - job_name: 'loki' static_configs: - targets: ['loki:3100'] labels: service: 'loki' component: 'logging' - job_name: 'tempo' static_configs: - targets: ['tempo:3200'] labels: service: 'tempo' component: 'tracing' - job_name: 'otel-collector' static_configs: - targets: ['otel-collector:8888'] labels: service: 'otel-collector' component: 'telemetry'