diff --git a/platform/monitoring/application.yaml b/platform/monitoring/application.yaml new file mode 100644 index 0000000..ce33ced --- /dev/null +++ b/platform/monitoring/application.yaml @@ -0,0 +1,72 @@ +# ArgoCD Application: kube-prometheus-stack gerenciado por GitOps (source = Helm repo, versao fixada) +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: monitoring + namespace: argocd +spec: + project: default + source: + repoURL: https://prometheus-community.github.io/helm-charts + chart: kube-prometheus-stack + targetRevision: 86.2.3 + helm: + values: | + alertmanager: + enabled: false + grafana: + admin: + existingSecret: grafana-admin + userKey: admin-user + passwordKey: admin-password + defaultDashboardsTimezone: America/Sao_Paulo + ingress: + enabled: true + ingressClassName: traefik + annotations: + cert-manager.io/cluster-issuer: letsencrypt-prod + traefik.ingress.kubernetes.io/router.middlewares: monitoring-redirect-https@kubernetescrd + hosts: + - grafana.187.77.37.184.nip.io + tls: + - secretName: grafana-tls + hosts: + - grafana.187.77.37.184.nip.io + resources: + requests: + cpu: 100m + memory: 256Mi + limits: + memory: 512Mi + prometheus: + prometheusSpec: + retention: 7d + resources: + requests: + cpu: 200m + memory: 512Mi + limits: + memory: 1536Mi + storageSpec: + volumeClaimTemplate: + spec: + storageClassName: local-path + accessModes: [ReadWriteOnce] + resources: + requests: + storage: 10Gi + prometheusOperator: + resources: + requests: + cpu: 50m + memory: 128Mi + destination: + server: https://kubernetes.default.svc + namespace: monitoring + syncPolicy: + automated: + prune: false + selfHeal: true + syncOptions: + - ServerSideApply=true + - CreateNamespace=true diff --git a/platform/monitoring/grafana-admin-sealed.yaml b/platform/monitoring/grafana-admin-sealed.yaml new file mode 100644 index 0000000..31ee843 --- /dev/null +++ b/platform/monitoring/grafana-admin-sealed.yaml @@ -0,0 +1,16 @@ +--- +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + creationTimestamp: null + name: grafana-admin + namespace: monitoring +spec: + encryptedData: + admin-password: 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 + admin-user: AgC0J7Eh4710kZ06t7ftm6KkwIs36WUf1aZKrzX9bfjZPHLA5lUycUQM8PWV/0hcxDZMYtgEtUrdnxoyp3UNQJPjEyeArvdiBq0rqewfq9UjMAO7W3ZH0cGzBA8KlQ7FqNoDSETuPibeFV8JOufGEZ5db/Oplv3/oMt4tscsPw0N7XP63hF/m3oIvokEZhpG0+qUcRu+gb9MTQPmrG333smKXbhVj3H1YZyj8EjoizW7cugPbC/L//DK5sacfVtIcokEYlD9Ajnko+hR/jWGm5DIUyBuC1Tp6OX6Rbu/BV9q3lMHVneBBiWFX9z1idVSrBVHVVmHNBVbvdGk7fAm6HIhYaye/NlSzxkqSF2cubrIZL/9KEst/4XY75oMn1wQhUl/ZJiBtibwRe14NgPuCcfyF2S+Mmpst77b76724DP4Mix4ITXZEdmje0UahiqJEFx+LKNy2Y6Mv8l3VBm5efbT9AinusCEQBZ+kDADXNHxgj3aMFxpwdvMMFYk+WluzQSSdm+2Xou9f+A5IgzxUovF0gG0+NaXLxRzUYGMrJSEpkQo3u99tFj1hFussULLigk446Mp/++QQBuMJRgePJp0c4zmQfWbPhgnQdP+oqI6blTVCwxqoe8bNMJ/stjF3N7KtvBo5Srjj37UpPpWBbpBrr6knBjlqmBihWooQE2+9VL8CHoao6FfNlCJbBK3GnSlUbCdxg== + template: + metadata: + creationTimestamp: null + name: grafana-admin + namespace: monitoring