diff --git a/services/monitoring/README.md b/services/monitoring/README.md index 4a398d4..55bd247 100644 --- a/services/monitoring/README.md +++ b/services/monitoring/README.md @@ -5,20 +5,12 @@ - - -## promtail - -## Setup - -Using flux for reconciliation. - -``` bash -./ops-scripts/apply-flux.sh -``` +## alloy **promtail Encrypt secrets:** ``` bash -sops -e deploy/promtail/helm-values.private.dec.yaml > deploy/promtail/helm-values.private.yaml +sops -e deploy/alloy/global/secrets.dec.yaml > deploy/alloy/global/secrets.yaml ``` **Check agent:** diff --git a/services/monitoring/deploy/alloy/global/secrets.yaml b/services/monitoring/deploy/alloy/global/secrets.yaml new file mode 100644 index 0000000..37a78ed --- /dev/null +++ b/services/monitoring/deploy/alloy/global/secrets.yaml @@ -0,0 +1,21 @@ +apiVersion: v1 +kind: Secret +metadata: + name: alloy-global +stringData: + loki_url: ENC[AES256_GCM,data:JgPEmYXY2sV1Vo18pvXtZ2JJ8aGa9pl4HBeZL2pwtsUQmHgwq4A0xgvkAr25hPnY0QImnlVZLdghvTo=,iv:RhpoDSFMfKdgpdRpIdJVVFKnWUzj3mqHkZVs7QHRWDs=,tag:xgE01LFaul9pdIbumBAngg==,type:str] +sops: + age: + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvU3dQTnlrMUc0aWdLQlMy + T2VVU0pyTEtpWTVVdWlySGdyeDRjSGVlM2xzCk1QVmxKNTJjU2t0dSsrQURQbkJ1 + a2ErK1ZuQWZ2ZFFrQUl0eE5rdndhYkEKLS0tIFhiUnluczlYVzIwQW14U2Z2YVpQ + WENVbHpCRmR1OVJ1bkxrY2JrYmZ3SWsK2XKMUa56IZl1ZLTx6kTVsJN8jeR73smq + 532Q+h6KtSfjEBt119Kqoj1B/y3UDYp3WtuD68It4iOB9SRFBlZTCA== + -----END AGE ENCRYPTED FILE----- + recipient: age1f9e4pvp5y8gzuk8mz2s5xm85dd7znxhk56tcpuxqwn78qfjwja0qekwlju + encrypted_regex: ^(data|stringData)$ + lastmodified: "2026-08-29T20:21:41Z" + mac: ENC[AES256_GCM,data:cJTKb+tEhTIg30wvTrgsA1laiE1rQ4jvauEtrzTVcdV2MplvPo2q+ENgYqJ66tq+gik0eK7uoa7+D2v566eJTxyzgJgN3NLxiUdt5NUzi1YA3WyOJGSEGVxExQ1oISni+SJpBVmNW3YyrZzDTYKgBrDJ0TlLmFaaK13qdOy7wq0=,iv:fGgF1kYiE6DNqKzDvIH7aWNxra7ilyD/lRUSJVPYUck=,tag:WLiDAklYQ6c/LNBDKXYK7w==,type:str] + version: 3.13.1 diff --git a/services/monitoring/deploy/flux/alloy-app-sync.yaml b/services/monitoring/deploy/flux/alloy-app-sync.yaml index d65b2de..1876851 100644 --- a/services/monitoring/deploy/flux/alloy-app-sync.yaml +++ b/services/monitoring/deploy/flux/alloy-app-sync.yaml @@ -1,7 +1,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1 kind: Kustomization metadata: - name: promtail + name: alloy spec: interval: 1m sourceRef: diff --git a/services/monitoring/ops-scripts/apply-flux.sh b/services/monitoring/ops-scripts/apply-flux.sh deleted file mode 100755 index e4f8708..0000000 --- a/services/monitoring/ops-scripts/apply-flux.sh +++ /dev/null @@ -1,4 +0,0 @@ -#!/bin/bash -set -e - -kubectl kustomize deploy/flux | kubectl apply -f - \ No newline at end of file