Automated upload for observability.t09.de
This commit is contained in:
parent
a2fcd2ed29
commit
d10f650e99
4 changed files with 36 additions and 123 deletions
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: Application
|
|
||||||
metadata:
|
|
||||||
name: dex
|
|
||||||
namespace: argocd
|
|
||||||
labels:
|
|
||||||
env: dev
|
|
||||||
spec:
|
|
||||||
project: default
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- CreateNamespace=true
|
|
||||||
retry:
|
|
||||||
limit: -1
|
|
||||||
destination:
|
|
||||||
name: in-cluster
|
|
||||||
namespace: dex
|
|
||||||
sources:
|
|
||||||
- repoURL: https://charts.dexidp.io
|
|
||||||
chart: dex
|
|
||||||
targetRevision: 0.23.0
|
|
||||||
helm:
|
|
||||||
valueFiles:
|
|
||||||
- $values/otc/observability.t09.de/stacks/core/dex/values.yaml
|
|
||||||
- repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
|
|
||||||
targetRevision: HEAD
|
|
||||||
ref: values
|
|
||||||
|
|
@ -1,71 +0,0 @@
|
||||||
ingress:
|
|
||||||
enabled: true
|
|
||||||
className: nginx
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: main
|
|
||||||
hosts:
|
|
||||||
- host: dex.observability.t09.de
|
|
||||||
paths:
|
|
||||||
- path: /
|
|
||||||
pathType: Prefix
|
|
||||||
tls:
|
|
||||||
- hosts:
|
|
||||||
- dex.observability.t09.de
|
|
||||||
secretName: dex-cert
|
|
||||||
|
|
||||||
envVars:
|
|
||||||
- name: FORGEJO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: FORGEJO_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-forgejo-client
|
|
||||||
key: clientID
|
|
||||||
- name: OIDC_DEX_GRAFANA_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-grafana-client
|
|
||||||
key: clientSecret
|
|
||||||
- name: OIDC_DEX_ARGO_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: dex-argo-client
|
|
||||||
key: clientSecret
|
|
||||||
|
|
||||||
config:
|
|
||||||
# Set it to a valid URL
|
|
||||||
issuer: https://dex.observability.t09.de
|
|
||||||
|
|
||||||
# See https://dexidp.io/docs/storage/ for more options
|
|
||||||
storage:
|
|
||||||
type: memory
|
|
||||||
|
|
||||||
oauth2:
|
|
||||||
skipApprovalScreen: true
|
|
||||||
alwaysShowLoginScreen: false
|
|
||||||
|
|
||||||
connectors:
|
|
||||||
- type: gitea
|
|
||||||
id: gitea
|
|
||||||
name: Forgejo
|
|
||||||
config:
|
|
||||||
clientID: "{{`{{ .Env.FORGEJO_CLIENT_ID }}`}}"
|
|
||||||
clientSecret: "{{`{{ .Env.FORGEJO_CLIENT_SECRET }}`}}"
|
|
||||||
redirectURI: https://dex.observability.t09.de/callback
|
|
||||||
baseURL: https://edp.buildth.ing
|
|
||||||
enablePasswordDB: false
|
|
||||||
|
|
||||||
staticClients:
|
|
||||||
- id: controller-argocd-dex
|
|
||||||
name: ArgoCD Client
|
|
||||||
redirectURIs:
|
|
||||||
- "http://argocd.observability.t09.de/auth/callback"
|
|
||||||
secret: "{{`{{ .Env.OIDC_DEX_ARGO_CLIENT_SECRET }}`}}"
|
|
||||||
- id: grafana
|
|
||||||
redirectURIs:
|
|
||||||
- "https://grafana.observability.t09.de/login/generic_oauth"
|
|
||||||
name: "Grafana"
|
|
||||||
secret: "{{`{{ .Env.OIDC_DEX_GRAFANA_CLIENT_SECRET }}`}}"
|
|
||||||
|
|
@ -14,7 +14,7 @@ spec:
|
||||||
# 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
|
# 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
|
||||||
activeDeadlineSeconds: 1350
|
activeDeadlineSeconds: 1350
|
||||||
backoffLimit: 2
|
backoffLimit: 2
|
||||||
ttlSecondsAfterFinished: 259200 # 3 days
|
ttlSecondsAfterFinished: 259200 #
|
||||||
template:
|
template:
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
|
|
|
||||||
|
|
@ -301,7 +301,8 @@ vmsingle:
|
||||||
# -- Enable deployment of ingress for server component
|
# -- Enable deployment of ingress for server component
|
||||||
enabled: false
|
enabled: false
|
||||||
# -- Ingress annotations
|
# -- Ingress annotations
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
# -- Ingress extra labels
|
# -- Ingress extra labels
|
||||||
|
|
@ -350,8 +351,9 @@ vmcluster:
|
||||||
spec:
|
spec:
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 10Gi
|
storage: 10Gi
|
||||||
resources: {}
|
resources:
|
||||||
|
{}
|
||||||
# limits:
|
# limits:
|
||||||
# cpu: "1"
|
# cpu: "1"
|
||||||
# memory: 1500Mi
|
# memory: 1500Mi
|
||||||
|
|
@ -368,7 +370,8 @@ vmcluster:
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
storage: 2Gi
|
storage: 2Gi
|
||||||
resources: {}
|
resources:
|
||||||
|
{}
|
||||||
# limits:
|
# limits:
|
||||||
# cpu: "1"
|
# cpu: "1"
|
||||||
# memory: "1000Mi"
|
# memory: "1000Mi"
|
||||||
|
|
@ -381,7 +384,8 @@ vmcluster:
|
||||||
port: "8480"
|
port: "8480"
|
||||||
replicaCount: 2
|
replicaCount: 2
|
||||||
extraArgs: {}
|
extraArgs: {}
|
||||||
resources: {}
|
resources:
|
||||||
|
{}
|
||||||
# limits:
|
# limits:
|
||||||
# cpu: "1"
|
# cpu: "1"
|
||||||
# memory: 1000Mi
|
# memory: 1000Mi
|
||||||
|
|
@ -474,7 +478,8 @@ vmcluster:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
# -- Ingress annotations
|
# -- Ingress annotations
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
|
|
||||||
|
|
@ -538,7 +543,7 @@ alertmanager:
|
||||||
config:
|
config:
|
||||||
route:
|
route:
|
||||||
receiver: "blackhole"
|
receiver: "blackhole"
|
||||||
routes:
|
routes:
|
||||||
- matchers:
|
- matchers:
|
||||||
- severity=~"critical|major"
|
- severity=~"critical|major"
|
||||||
receiver: outlook
|
receiver: outlook
|
||||||
|
|
@ -546,15 +551,15 @@ alertmanager:
|
||||||
- name: blackhole
|
- name: blackhole
|
||||||
- name: outlook
|
- name: outlook
|
||||||
email_configs:
|
email_configs:
|
||||||
- smarthost: "mail.mms-support.de:465"
|
- smarthost: 'mail.mms-support.de:465'
|
||||||
auth_username: "ipcei-cis-devfw@mms-support.de"
|
auth_username: 'ipcei-cis-devfw@mms-support.de'
|
||||||
auth_password:
|
auth_password:
|
||||||
name: email-user-credentials
|
name: email-user-credentials
|
||||||
key: connection-string
|
key: connection-string
|
||||||
from: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
|
from: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
|
||||||
to: "f9f9953a.mg.telekom.de@de.teams.ms"
|
to: 'f9f9953a.mg.telekom.de@de.teams.ms'
|
||||||
headers:
|
headers:
|
||||||
subject: "Grafana Mail Alerts"
|
subject: 'Grafana Mail Alerts'
|
||||||
require_tls: false
|
require_tls: false
|
||||||
|
|
||||||
# -- Better alert templates for [slack source](https://gist.github.com/milesbxf/e2744fc90e9c41b47aa47925f8ff6512)
|
# -- Better alert templates for [slack source](https://gist.github.com/milesbxf/e2744fc90e9c41b47aa47925f8ff6512)
|
||||||
|
|
@ -562,7 +567,8 @@ alertmanager:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|
||||||
# -- (object) Extra alert templates
|
# -- (object) Extra alert templates
|
||||||
templateFiles: {}
|
templateFiles:
|
||||||
|
{}
|
||||||
# template_1.tmpl: |-
|
# template_1.tmpl: |-
|
||||||
# {{ define "hello" -}}
|
# {{ define "hello" -}}
|
||||||
# hello, Victoria!
|
# hello, Victoria!
|
||||||
|
|
@ -576,7 +582,8 @@ alertmanager:
|
||||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||||
# ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
# Values can be templated
|
# Values can be templated
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
labels: {}
|
labels: {}
|
||||||
|
|
@ -619,7 +626,8 @@ vmalert:
|
||||||
externalLabels: {}
|
externalLabels: {}
|
||||||
|
|
||||||
# -- (object) Extra VMAlert annotation templates
|
# -- (object) Extra VMAlert annotation templates
|
||||||
templateFiles: {}
|
templateFiles:
|
||||||
|
{}
|
||||||
# template_1.tmpl: |-
|
# template_1.tmpl: |-
|
||||||
# {{ define "hello" -}}
|
# {{ define "hello" -}}
|
||||||
# hello, Victoria!
|
# hello, Victoria!
|
||||||
|
|
@ -642,7 +650,8 @@ vmalert:
|
||||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||||
# ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
# Values can be templated
|
# Values can be templated
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
labels: {}
|
labels: {}
|
||||||
|
|
@ -694,7 +703,8 @@ vmagent:
|
||||||
# -- VMAgent annotations
|
# -- VMAgent annotations
|
||||||
annotations: {}
|
annotations: {}
|
||||||
# -- Remote write configuration of VMAgent, allowed parameters defined in a [spec](https://docs.victoriametrics.com/operator/api#vmagentremotewritespec)
|
# -- Remote write configuration of VMAgent, allowed parameters defined in a [spec](https://docs.victoriametrics.com/operator/api#vmagentremotewritespec)
|
||||||
additionalRemoteWrites: []
|
additionalRemoteWrites:
|
||||||
|
[]
|
||||||
#- url: http://some-remote-write/api/v1/write
|
#- url: http://some-remote-write/api/v1/write
|
||||||
# -- (object) Full spec for VMAgent CRD. Allowed values described [here](https://docs.victoriametrics.com/operator/api#vmagentspec)
|
# -- (object) Full spec for VMAgent CRD. Allowed values described [here](https://docs.victoriametrics.com/operator/api#vmagentspec)
|
||||||
spec:
|
spec:
|
||||||
|
|
@ -717,7 +727,8 @@ vmagent:
|
||||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||||
# ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
# Values can be templated
|
# Values can be templated
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
labels: {}
|
labels: {}
|
||||||
|
|
@ -781,7 +792,7 @@ defaultDatasources:
|
||||||
implementation: prometheus
|
implementation: prometheus
|
||||||
# -- Configure additional grafana datasources (passed through tpl).
|
# -- Configure additional grafana datasources (passed through tpl).
|
||||||
# Check [here](http://docs.grafana.org/administration/provisioning/#datasources) for details
|
# Check [here](http://docs.grafana.org/administration/provisioning/#datasources) for details
|
||||||
extra:
|
extra:
|
||||||
- name: VictoriaLogs
|
- name: VictoriaLogs
|
||||||
access: proxy
|
access: proxy
|
||||||
type: victoriametrics-logs-datasource
|
type: victoriametrics-logs-datasource
|
||||||
|
|
@ -832,7 +843,7 @@ grafana:
|
||||||
|
|
||||||
# Uncomment the block below, if you want to enable VictoriaMetrics Datasource in Grafana:
|
# Uncomment the block below, if you want to enable VictoriaMetrics Datasource in Grafana:
|
||||||
# Note that Grafana will need internet access to install the datasource plugin.
|
# Note that Grafana will need internet access to install the datasource plugin.
|
||||||
|
|
||||||
plugins:
|
plugins:
|
||||||
- victoriametrics-metrics-datasource
|
- victoriametrics-metrics-datasource
|
||||||
- victoriametrics-logs-datasource
|
- victoriametrics-logs-datasource
|
||||||
|
|
@ -843,7 +854,8 @@ grafana:
|
||||||
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
||||||
# ingressClassName: nginx
|
# ingressClassName: nginx
|
||||||
# Values can be templated
|
# Values can be templated
|
||||||
annotations: {}
|
annotations:
|
||||||
|
{}
|
||||||
# kubernetes.io/ingress.class: nginx
|
# kubernetes.io/ingress.class: nginx
|
||||||
# kubernetes.io/tls-acme: "true"
|
# kubernetes.io/tls-acme: "true"
|
||||||
labels: {}
|
labels: {}
|
||||||
|
|
@ -877,7 +889,7 @@ grafana:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app.kubernetes.io/name: '{{ include "grafana.name" .Subcharts.grafana }}'
|
app.kubernetes.io/name: '{{ include "grafana.name" .Subcharts.grafana }}'
|
||||||
endpoints:
|
endpoints:
|
||||||
- port: "{{ .Values.grafana.service.portName }}"
|
- port: '{{ .Values.grafana.service.portName }}'
|
||||||
|
|
||||||
# -- prometheus-node-exporter dependency chart configuration. For possible values check [here](https://github.com/prometheus-community/helm-charts/blob/main/charts/prometheus-node-exporter/values.yaml)
|
# -- prometheus-node-exporter dependency chart configuration. For possible values check [here](https://github.com/prometheus-community/helm-charts/blob/main/charts/prometheus-node-exporter/values.yaml)
|
||||||
prometheus-node-exporter:
|
prometheus-node-exporter:
|
||||||
|
|
@ -1215,3 +1227,4 @@ kubeProxy:
|
||||||
|
|
||||||
# -- Add extra objects dynamically to this chart
|
# -- Add extra objects dynamically to this chart
|
||||||
extraObjects: []
|
extraObjects: []
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue