add prometheus

prometheus/application.yaml

@@ -0,0 +1,61 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: prometheus
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: prometheus
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ServerSideApply=true
+  source:
+    chart: kube-prometheus-stack
+    repoURL: https://prometheus-community.github.io/helm-charts
+    targetRevision: 45.23.0
+    helm:
+      values: |-
+        grafana:
+          grafana.ini:
+            server:
+              domain: grafana.strudelline.net
+
+            auth.generic_oauth:
+                name: werts
+                enabled: true
+                client_id: grafana
+                client_secret: LwQV4aiy9zYx959ZT6ROUVH8PmqZAkVysOaflvmUwCLvRg2EDMTDxy1lj0S1227a70VOjopb1erIVmwncvSrh0
+                allow_sign_up: false
+                scopes: email account openid
+                api_url: https://auth.werts.us/realms/werts/protocol/openid-connect/userinfo
+                auth_url: https://auth.werts.us/realms/werts/protocol/openid-connect/auth
+                token_url: https://auth.werts.us/realms/werts/protocol/openid-connect/token
+                use_pkce: true
+            smtp:
+              enabled: true
+              password: d57bbfd562ceae1a90c762db5a908f37-70c38fed-e4a3e245
+              user: grafana@strudelline.net
+              host: smtp.mailgun.org:465
+
+          admin:
+            existingSecret: prometheus-grafana-custom-secret
+
+          ingress:
+            enabled: true
+            hosts:
+              - "grafana.strudelline.net"
+            path: "/"
+            tls:
+              - hosts:
+                  - grafana.strudelline.net
+                secretName: wildcard-tls
+
+        # values

prometheus/ns.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    wildcard-tls.kn8v.com/copy: "true"
+  name: prometheus

prometheus/prometheus-grafana-secret-sealed.yaml

@@ -0,0 +1,17 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: prometheus-grafana-custom-secret
+  namespace: prometheus
+spec:
+  encryptedData:
+    admin-password: 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
+    admin-user: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: prometheus-grafana-custom-secret
+      namespace: prometheus
+    type: Opaque
+