Automated upload for observability.t09.de

This commit is contained in:
Automated pipeline 2025-08-13 09:33:50 +00:00 committed by Actions pipeline
parent a2fcd2ed29
commit d10f650e99
4 changed files with 36 additions and 123 deletions

View file

@ -1,29 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: dex
namespace: argocd
labels:
env: dev
spec:
project: default
syncPolicy:
automated:
selfHeal: true
syncOptions:
- CreateNamespace=true
retry:
limit: -1
destination:
name: in-cluster
namespace: dex
sources:
- repoURL: https://charts.dexidp.io
chart: dex
targetRevision: 0.23.0
helm:
valueFiles:
- $values/otc/observability.t09.de/stacks/core/dex/values.yaml
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values

View file

@ -1,71 +0,0 @@
ingress:
enabled: true
className: nginx
annotations:
cert-manager.io/cluster-issuer: main
hosts:
- host: dex.observability.t09.de
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- dex.observability.t09.de
secretName: dex-cert
envVars:
- name: FORGEJO_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: dex-forgejo-client
key: clientSecret
- name: FORGEJO_CLIENT_ID
valueFrom:
secretKeyRef:
name: dex-forgejo-client
key: clientID
- name: OIDC_DEX_GRAFANA_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: dex-grafana-client
key: clientSecret
- name: OIDC_DEX_ARGO_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: dex-argo-client
key: clientSecret
config:
# Set it to a valid URL
issuer: https://dex.observability.t09.de
# See https://dexidp.io/docs/storage/ for more options
storage:
type: memory
oauth2:
skipApprovalScreen: true
alwaysShowLoginScreen: false
connectors:
- type: gitea
id: gitea
name: Forgejo
config:
clientID: "{{`{{ .Env.FORGEJO_CLIENT_ID }}`}}"
clientSecret: "{{`{{ .Env.FORGEJO_CLIENT_SECRET }}`}}"
redirectURI: https://dex.observability.t09.de/callback
baseURL: https://edp.buildth.ing
enablePasswordDB: false
staticClients:
- id: controller-argocd-dex
name: ArgoCD Client
redirectURIs:
- "http://argocd.observability.t09.de/auth/callback"
secret: "{{`{{ .Env.OIDC_DEX_ARGO_CLIENT_SECRET }}`}}"
- id: grafana
redirectURIs:
- "https://grafana.observability.t09.de/login/generic_oauth"
name: "Grafana"
secret: "{{`{{ .Env.OIDC_DEX_GRAFANA_CLIENT_SECRET }}`}}"

View file

@ -14,7 +14,7 @@ spec:
# 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer # 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
activeDeadlineSeconds: 1350 activeDeadlineSeconds: 1350
backoffLimit: 2 backoffLimit: 2
ttlSecondsAfterFinished: 259200 # 3 days ttlSecondsAfterFinished: 259200 #
template: template:
spec: spec:
containers: containers:

View file

@ -301,7 +301,8 @@ vmsingle:
# -- Enable deployment of ingress for server component # -- Enable deployment of ingress for server component
enabled: false enabled: false
# -- Ingress annotations # -- Ingress annotations
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
# -- Ingress extra labels # -- Ingress extra labels
@ -350,8 +351,9 @@ vmcluster:
spec: spec:
resources: resources:
requests: requests:
storage: 10Gi storage: 10Gi
resources: {} resources:
{}
# limits: # limits:
# cpu: "1" # cpu: "1"
# memory: 1500Mi # memory: 1500Mi
@ -368,7 +370,8 @@ vmcluster:
resources: resources:
requests: requests:
storage: 2Gi storage: 2Gi
resources: {} resources:
{}
# limits: # limits:
# cpu: "1" # cpu: "1"
# memory: "1000Mi" # memory: "1000Mi"
@ -381,7 +384,8 @@ vmcluster:
port: "8480" port: "8480"
replicaCount: 2 replicaCount: 2
extraArgs: {} extraArgs: {}
resources: {} resources:
{}
# limits: # limits:
# cpu: "1" # cpu: "1"
# memory: 1000Mi # memory: 1000Mi
@ -474,7 +478,8 @@ vmcluster:
enabled: false enabled: false
# -- Ingress annotations # -- Ingress annotations
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
@ -538,7 +543,7 @@ alertmanager:
config: config:
route: route:
receiver: "blackhole" receiver: "blackhole"
routes: routes:
- matchers: - matchers:
- severity=~"critical|major" - severity=~"critical|major"
receiver: outlook receiver: outlook
@ -546,15 +551,15 @@ alertmanager:
- name: blackhole - name: blackhole
- name: outlook - name: outlook
email_configs: email_configs:
- smarthost: "mail.mms-support.de:465" - smarthost: 'mail.mms-support.de:465'
auth_username: "ipcei-cis-devfw@mms-support.de" auth_username: 'ipcei-cis-devfw@mms-support.de'
auth_password: auth_password:
name: email-user-credentials name: email-user-credentials
key: connection-string key: connection-string
from: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>' from: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
to: "f9f9953a.mg.telekom.de@de.teams.ms" to: 'f9f9953a.mg.telekom.de@de.teams.ms'
headers: headers:
subject: "Grafana Mail Alerts" subject: 'Grafana Mail Alerts'
require_tls: false require_tls: false
# -- Better alert templates for [slack source](https://gist.github.com/milesbxf/e2744fc90e9c41b47aa47925f8ff6512) # -- Better alert templates for [slack source](https://gist.github.com/milesbxf/e2744fc90e9c41b47aa47925f8ff6512)
@ -562,7 +567,8 @@ alertmanager:
enabled: true enabled: true
# -- (object) Extra alert templates # -- (object) Extra alert templates
templateFiles: {} templateFiles:
{}
# template_1.tmpl: |- # template_1.tmpl: |-
# {{ define "hello" -}} # {{ define "hello" -}}
# hello, Victoria! # hello, Victoria!
@ -576,7 +582,8 @@ alertmanager:
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress # See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx # ingressClassName: nginx
# Values can be templated # Values can be templated
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
labels: {} labels: {}
@ -619,7 +626,8 @@ vmalert:
externalLabels: {} externalLabels: {}
# -- (object) Extra VMAlert annotation templates # -- (object) Extra VMAlert annotation templates
templateFiles: {} templateFiles:
{}
# template_1.tmpl: |- # template_1.tmpl: |-
# {{ define "hello" -}} # {{ define "hello" -}}
# hello, Victoria! # hello, Victoria!
@ -642,7 +650,8 @@ vmalert:
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress # See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx # ingressClassName: nginx
# Values can be templated # Values can be templated
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
labels: {} labels: {}
@ -694,7 +703,8 @@ vmagent:
# -- VMAgent annotations # -- VMAgent annotations
annotations: {} annotations: {}
# -- Remote write configuration of VMAgent, allowed parameters defined in a [spec](https://docs.victoriametrics.com/operator/api#vmagentremotewritespec) # -- Remote write configuration of VMAgent, allowed parameters defined in a [spec](https://docs.victoriametrics.com/operator/api#vmagentremotewritespec)
additionalRemoteWrites: [] additionalRemoteWrites:
[]
#- url: http://some-remote-write/api/v1/write #- url: http://some-remote-write/api/v1/write
# -- (object) Full spec for VMAgent CRD. Allowed values described [here](https://docs.victoriametrics.com/operator/api#vmagentspec) # -- (object) Full spec for VMAgent CRD. Allowed values described [here](https://docs.victoriametrics.com/operator/api#vmagentspec)
spec: spec:
@ -717,7 +727,8 @@ vmagent:
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress # See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx # ingressClassName: nginx
# Values can be templated # Values can be templated
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
labels: {} labels: {}
@ -781,7 +792,7 @@ defaultDatasources:
implementation: prometheus implementation: prometheus
# -- Configure additional grafana datasources (passed through tpl). # -- Configure additional grafana datasources (passed through tpl).
# Check [here](http://docs.grafana.org/administration/provisioning/#datasources) for details # Check [here](http://docs.grafana.org/administration/provisioning/#datasources) for details
extra: extra:
- name: VictoriaLogs - name: VictoriaLogs
access: proxy access: proxy
type: victoriametrics-logs-datasource type: victoriametrics-logs-datasource
@ -832,7 +843,7 @@ grafana:
# Uncomment the block below, if you want to enable VictoriaMetrics Datasource in Grafana: # Uncomment the block below, if you want to enable VictoriaMetrics Datasource in Grafana:
# Note that Grafana will need internet access to install the datasource plugin. # Note that Grafana will need internet access to install the datasource plugin.
plugins: plugins:
- victoriametrics-metrics-datasource - victoriametrics-metrics-datasource
- victoriametrics-logs-datasource - victoriametrics-logs-datasource
@ -843,7 +854,8 @@ grafana:
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress # See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx # ingressClassName: nginx
# Values can be templated # Values can be templated
annotations: {} annotations:
{}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
labels: {} labels: {}
@ -877,7 +889,7 @@ grafana:
matchLabels: matchLabels:
app.kubernetes.io/name: '{{ include "grafana.name" .Subcharts.grafana }}' app.kubernetes.io/name: '{{ include "grafana.name" .Subcharts.grafana }}'
endpoints: endpoints:
- port: "{{ .Values.grafana.service.portName }}" - port: '{{ .Values.grafana.service.portName }}'
# -- prometheus-node-exporter dependency chart configuration. For possible values check [here](https://github.com/prometheus-community/helm-charts/blob/main/charts/prometheus-node-exporter/values.yaml) # -- prometheus-node-exporter dependency chart configuration. For possible values check [here](https://github.com/prometheus-community/helm-charts/blob/main/charts/prometheus-node-exporter/values.yaml)
prometheus-node-exporter: prometheus-node-exporter:
@ -1215,3 +1227,4 @@ kubeProxy:
# -- Add extra objects dynamically to this chart # -- Add extra objects dynamically to this chart
extraObjects: [] extraObjects: []