fluxcd: add prometheus

monitoring/README.md

@@ -1,11 +1,10 @@
 # monitoring
 
-## namespace
-
-``` bash
-kubectl create namespace monitoring
-```
+## prometheus-stack
 
+- <https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack>
+- <https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml>
+  
 ## promtail
 
 ## Setup
@@ -16,7 +15,7 @@ Using flux for reconciliation.
 ./ops-scripts/apply-flux.sh
 ```
 
-**Encrypt secrets:**
+**promtail Encrypt secrets:**
 
 ``` bash
 sops -e deploy/promtail/helm-values.private.dec.yaml > deploy/promtail/helm-values.private.yaml

monitoring/deploy/flux/prometheus-app-sync.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: prometheus
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: casa
+    namespace: casa-limbosolutions-com
+  path: services/monitoring/deploy/prometheus
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops-age

monitoring/deploy/flux/promtail-app-sync.yaml

@@ -8,7 +8,7 @@ spec:
     kind: GitRepository
     name: casa
     namespace: casa-limbosolutions-com
-  path: services/monitoring/promtail
+  path: services/monitoring/deploy/promtail
   prune: true
   decryption:
     provider: sops

monitoring/deploy/prometheus/helm/helm-release.yaml

@@ -0,0 +1,28 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: monitoring
+spec:
+  releaseName: prometheus-stack
+  interval: 40h
+  chart:
+    spec:
+      chart: prometheus-stack
+      version: 86.x.x
+      sourceRef:
+        kind: HelmRepository
+        name: prometheus-stack
+      interval: 40h
+  valuesFrom:
+    - kind: Secret
+      name: prometheus-stack-helm-values
+      valuesKey: 01-only-crd-and-operator.yaml
+    - kind: Secret
+      name: prometheus-stack-helm-values
+      valuesKey: 02-kube-metrics.yaml
+    - kind: Secret
+      name: prometheus-stack-helm-values
+      valuesKey: 03-node-exporter.yaml
+    - kind: Secret
+      name: prometheus-stack-helm-values
+      valuesKey: 04-kubelet.yaml

monitoring/deploy/prometheus/helm/helm-repo.yaml

@@ -0,0 +1,7 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: prometheus-stack
+spec:
+  interval: 40h
+  url: https://prometheus-community.github.io/helm-charts

monitoring/deploy/prometheus/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: monitoring
+resources:
+ - helm/helm-repo.yaml 
+ - helm/helm-release.yaml
+ - prometheus-agent.yaml
+secretGenerator:
+  - name: prometheus-stack-helm-values
+    files:
+      - 01-only-crd-and-operator.yaml=helm/01-only-crd-and-operator.yaml
+      - 02-kube-metrics.yaml=helm/02-kube-metrics.yaml
+      - 03-node-exporter.yaml=helm/03-node-exporter.yaml     
+      - 04-kubelet.yaml=helm/helm/04-kubelet.yaml

monitoring/deploy/prometheus/prometheus-agent.yaml

@@ -3,7 +3,6 @@ apiVersion: monitoring.coreos.com/v1alpha1
 kind: PrometheusAgent
 metadata:
   name: prometheus-agent
-  namespace: monitoring
 spec:
 
   podMonitorSelector: null

monitoring/prometheus/deploy/README.md

@@ -1,8 +1,6 @@
 # Prometheus Setup
 
-- <https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack>
-- <https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml>
-  
+
 ## helm chart
 
 ```bash

monitoring/prometheus/deploy/helm/10-testing-values.yaml

@@ -1 +0,0 @@
-# use for testing