feat(platform): monitoring via ArgoCD (Helm) + grafana SealedSecret

2026-06-16 20:28:45 +00:00
parent 73184e1d73
commit 5f0caf144c
2 changed files with 88 additions and 0 deletions
@@ -0,0 +1,72 @@
+# ArgoCD Application: kube-prometheus-stack gerenciado por GitOps (source = Helm repo, versao fixada)
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: monitoring
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://prometheus-community.github.io/helm-charts
+    chart: kube-prometheus-stack
+    targetRevision: 86.2.3
+    helm:
+      values: |
+        alertmanager:
+          enabled: false
+        grafana:
+          admin:
+            existingSecret: grafana-admin
+            userKey: admin-user
+            passwordKey: admin-password
+          defaultDashboardsTimezone: America/Sao_Paulo
+          ingress:
+            enabled: true
+            ingressClassName: traefik
+            annotations:
+              cert-manager.io/cluster-issuer: letsencrypt-prod
+              traefik.ingress.kubernetes.io/router.middlewares: monitoring-redirect-https@kubernetescrd
+            hosts:
+              - grafana.187.77.37.184.nip.io
+            tls:
+              - secretName: grafana-tls
+                hosts:
+                  - grafana.187.77.37.184.nip.io
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              memory: 512Mi
+        prometheus:
+          prometheusSpec:
+            retention: 7d
+            resources:
+              requests:
+                cpu: 200m
+                memory: 512Mi
+              limits:
+                memory: 1536Mi
+            storageSpec:
+              volumeClaimTemplate:
+                spec:
+                  storageClassName: local-path
+                  accessModes: [ReadWriteOnce]
+                  resources:
+                    requests:
+                      storage: 10Gi
+        prometheusOperator:
+          resources:
+            requests:
+              cpu: 50m
+              memory: 128Mi
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: monitoring
+  syncPolicy:
+    automated:
+      prune: false
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
+      - CreateNamespace=true
@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: grafana-admin
+  namespace: monitoring
+spec:
+  encryptedData:
+    admin-password: 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
+    admin-user: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: grafana-admin
+      namespace: monitoring