use edge rules

Author: soerenschneider

apps/monitoring/prometheus/components/initcontainer-seed-rules/kustomization.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: "kustomize.config.k8s.io/v1alpha1"
+kind: "Component"
+patches:
+  - target:
+      kind: "Deployment"
+      name: "prometheus"
+    path: "patch-initcontainer.yaml"
+  - target:
+      kind: "Deployment"
+      name: "prometheus"
+    patch: |-
+      - op: "add"
+        path: "/spec/template/spec/volumes/-"
+        value:
+          name: "rules"
+          emptyDir:
+            sizeLimit: "100Mi"
+      - op: "add"
+        path: "/spec/template/spec/containers/0/volumeMounts/-"
+        value:
+          name: "rules"
+          mountPath: "/rules"

apps/monitoring/prometheus/components/initcontainer-seed-rules/patch-initcontainer.yaml

@@ -0,0 +1,28 @@
+---
+- op: "add"
+  path: "/spec/template/spec/initContainers"
+  value:
+    - name: "seed"
+      image: "ghcr.io/soerenschneider/alerting-rules:main-20240403210327"
+      imagePullPolicy: "IfNotPresent"
+      command: ["rsync", "-vr", "/rules/", "/rules-dest/"]
+      securityContext:
+        runAsUser: 65532
+        runAsGroup: 65532
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - "ALL"
+        seccompProfile:
+          type: "RuntimeDefault"
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "5m"
+        limits:
+          memory: "512Mi"
+      volumeMounts:
+        - name: "rules"
+          mountPath: "/rules-dest"

clusters/dqs.dd.soeren.cloud/monitoring/prometheus/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - ../../../../apps/monitoring/prometheus
 components:
   - ../../../../apps/monitoring/prometheus/components/config
+  - ../../../../apps/monitoring/prometheus/components/initcontainer-seed-rules
   - ../../../../apps/monitoring/prometheus/components/rbac
   - ../../../../apps/monitoring/prometheus/components/reverse-proxy
   - ../../../../apps/monitoring/prometheus/components/tls-client-cert

clusters/dqs.dd.soeren.cloud/monitoring/prometheus/prometheus-config.yaml

@@ -6,7 +6,7 @@ global:
     cluster: dqs.dd.soeren.cloud
     location: dd
     datacenter: dd
-rule_files: [/etc/prometheus/rules/*.rules]
+rule_files: [/rules/basics/*.rules]
 alerting:
   alertmanagers:
     - scheme: http