Add email secret for alertmanager

Author: sfdamm

helm/monitor/templates/alertmanager-confiigmap.yaml

@@ -2,20 +2,20 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: alertmanager-config
-  namespace: team-git-push-force-monitor
+  namespace: {{ .Values.namespace.name }}
   labels:
     app: alertmanager
 data:
   alertmanager.yml: |-
     receivers:
       - name: 'email-notifications'
         email_configs:
-          - to: 'teamgitpushforce@gmail.com'
-            from: 'teamgitpushforce@gmail.com'
-            smarthost: 'smtp.gmail.com:587'
-            auth_username: 'teamgitpushforce@gmail.com'
-            auth_password: 'prqouryspbzvtrao'
-            auth_identity: 'teamgitpushforce@gmail.com'
-            require_tls: true
+          - to: '{{ .Values.alertmanager.email.to }}'
+            from: '{{ .Values.alertmanager.email.from }}'
+            smarthost: '{{ .Values.alertmanager.email.smarthost }}'
+            auth_username: '{{ .Values.alertmanager.email.auth_username }}'
+            auth_password_file: '/etc/alertmanager/secrets/auth_password'
+            auth_identity: '{{ .Values.alertmanager.email.auth_identity }}'
+            require_tls: {{ .Values.alertmanager.email.require_tls }}
     route:
-      receiver: 'email-notifications'
+      receiver: 'email-notifications'

helm/monitor/templates/alertmanager-deploy.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: alertmanager
-  namespace: team-git-push-force-monitor
+  namespace: {{ .Values.namespace.name }}
   labels:
     app: alertmanager
 spec:
@@ -17,15 +17,20 @@ spec:
     spec:
       containers:
         - name: alertmanager
-          image: prom/alertmanager:v0.26.0
+          image: {{ .Values.alertmanager.image.repository }}:{{ .Values.alertmanager.image.tag }}
           args:
             - "--config.file=/etc/alertmanager/alertmanager.yml"
           ports:
             - containerPort: 9093
           volumeMounts:
             - name: config-volume
               mountPath: /etc/alertmanager
+            - name: email-secret-volume
+              mountPath: /etc/alertmanager/secrets
       volumes:
         - name: config-volume
           configMap:
-            name: alertmanager-config
+            name: alertmanager-config
+        - name: email-secret-volume
+          secret:
+            secretName: alertmanager-email-secret

helm/monitor/templates/alertmanager-secret.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: alertmanager-email-secret
+  namespace: {{ .Values.namespace.name }}
+  labels:
+    app: alertmanager
+type: Opaque
+data:
+  auth_password: {{ .Values.alertmanager.email.auth_password | b64enc | quote }}

helm/monitor/templates/alertmanager-service.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: alertmanager
-  namespace: team-git-push-force-monitor
+  namespace: {{ .Values.namespace.name }}
   labels:
     app: alertmanager
 spec:

helm/monitor/values.yaml

@@ -198,6 +198,17 @@ alertmanager:
       kubernetes.io/ingress.class: nginx
       nginx.ingress.kubernetes.io/ssl-redirect: "true"
       nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+  # Email notification configuration
+  email:
+    to: "teamgitpushforce@gmail.com"
+    from: "teamgitpushforce@gmail.com"
+    smarthost: "smtp.gmail.com:587"
+    auth_username: "teamgitpushforce@gmail.com"
+    auth_identity: "teamgitpushforce@gmail.com"
+    # The password below will be stored in a Kubernetes Secret
+    # This should be replaced with your actual password in a secure manner
+    auth_password: "prqouryspbzvtrao"
+    require_tls: true