Skip to content

Commit 1d62b17

Browse files
soerenschneidersoerenschneider
committed
add further payloads
1 parent c27776c commit 1d62b17

File tree

16 files changed

+735
-0
lines changed

16 files changed

+735
-0
lines changed

‎clusters/argo-svc.dd.soeren.cloud/apps/mosquitto/kustomization.yaml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: mosquitto
5+
resources:
6+
- ../../../../apps/mosquitto
7+
- namespace.yaml
8+
components:
9+
- ../../../../apps/mosquitto/components/istio
10+
- ../../../../apps/mosquitto/components/tls
11+
- ../../../../apps/mosquitto/components/exporter
12+
patches:
13+
- target:
14+
kind: VirtualService
15+
name: mosquitto
16+
patch: |-
17+
- op: replace
18+
path: "/spec/hosts"
19+
value:
20+
- "mosquitto.svc.dd.soeren.cloud"
21+
- target:
22+
kind: Certificate
23+
name: mosquitto
24+
patch: |-
25+
- op: replace
26+
path: "/spec/commonName"
27+
value: "mosquitto.svc.dd.soeren.cloud"
28+
- op: replace
29+
path: "/spec/dnsNames"
30+
value:
31+
- "mosquitto.svc.dd.soeren.cloud"

‎clusters/argo-svc.dd.soeren.cloud/apps/mosquitto/namespace.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
kind: Namespace
3+
apiVersion: v1
4+
metadata:
5+
name: mosquitto
6+
labels:
7+
name: mosquitto

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/blackbox-exporter/config.yaml‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
---
2+
modules:
3+
dns_soerenschneider:
4+
dns:
5+
query_name: router.ez.soeren.cloud
6+
query_type: A
7+
validate_answer_rrs:
8+
fail_if_not_matches_regexp:
9+
- "router.ez.soeren.cloud.\t.*\tIN\tA\t.*192\\.168\\.2\\.3"
10+
prober: dns
11+
http:
12+
http:
13+
tls_config:
14+
cert_file: /certs/tls.crt
15+
key_file: /certs/tls.key
16+
valid_status_codes:
17+
- 200
18+
- 204
19+
- 301
20+
- 302
21+
- 403
22+
- 404
23+
prober: http
24+
timeout: 5s
25+
http_2xx:
26+
prober: http
27+
timeout: 5s
28+
icmp:
29+
icmp:
30+
preferred_ip_protocol: ip4
31+
prober: icmp
32+
timeout: 2s
33+
tcp_cert:
34+
prober: tcp
35+
tcp:
36+
tls: true
37+
timeout: 2s
38+
tcp_connect:
39+
prober: tcp
40+
timeout: 2s

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/blackbox-exporter/kustomization.yaml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: monitoring
5+
resources:
6+
- ../../../../../apps/monitoring/blackbox_exporter
7+
components:
8+
- ../../../../../apps/monitoring/blackbox_exporter/components/custom-config
9+
- ../../../../../apps/monitoring/blackbox_exporter/components/reverse-proxy
10+
- ../../../../../apps/monitoring/blackbox_exporter/components/tls-client-cert
11+
configMapGenerator:
12+
- name: blackbox-exporter-config
13+
files:
14+
- config.yaml

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/karma/karma.yaml‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
---
2+
alertmanager:
3+
interval: 60s
4+
servers:
5+
- name: local
6+
uri: http://router.dd.soeren.cloud:9093
7+
timeout: 10s
8+
proxy: true
9+
readonly: false
10+
headers:
11+
X-Auth-Test: some-token-or-other-string
12+
annotations:
13+
default:
14+
hidden: false
15+
hidden:
16+
- help
17+
visible: []
18+
custom:
19+
css: /custom.css
20+
js: /custom.js
21+
debug: false
22+
filters:
23+
default:
24+
- "@receiver!=deadman"
25+
- "@state=active"
26+
karma:
27+
name: karma-prod
28+
labels:
29+
color:
30+
static:
31+
- job
32+
unique:
33+
- cluster
34+
- instance
35+
- "@receiver"
36+
keep: []
37+
strip: []
38+
listen:
39+
address: "0.0.0.0"
40+
port: 8000
41+
cors:
42+
allowedOrigins:
43+
- https://example.com
44+
log:
45+
config: false
46+
level: info
47+
silences:
48+
comments:
49+
linkDetect:
50+
rules:
51+
- regex: "(DEVOPS-[0-9]+)"
52+
uriTemplate: https://jira.example.com/browse/$1
53+
receivers:
54+
keep: []
55+
strip: []
56+
silenceForm:
57+
strip:
58+
labels:
59+
- job
60+
defaultAlertmanagers:
61+
- local
62+
ui:
63+
refresh: 30s
64+
hideFiltersWhenIdle: true
65+
colorTitlebar: false
66+
minimalGroupWidth: 420
67+
alertsPerGroup: 5
68+
collapseGroups: collapsedOnMobile

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/karma/kustomization.yaml‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: monitoring
5+
resources:
6+
- ../../../../../apps/monitoring/karma
7+
components:
8+
- ../../../../../apps/monitoring/karma/components/reverse-proxy
9+
patches:
10+
- target:
11+
kind: Deployment
12+
name: karma
13+
patch: |-
14+
- op: add
15+
path: /spec/template/spec/priorityClassName
16+
value: prod-low-prio
17+
configMapGenerator:
18+
- name: karma-config
19+
files:
20+
- karma.yaml

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/karma/networkpolicy.yaml‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
---
2+
apiVersion: networking.k8s.io/v1
3+
kind: NetworkPolicy
4+
metadata:
5+
name: karma
6+
spec:
7+
podSelector:
8+
matchLabels:
9+
app: karma
10+
policyTypes:
11+
- Egress
12+
- Ingress
13+
ingress:
14+
- ports:
15+
- protocol: TCP
16+
port: karma
17+
from:
18+
- namespaceSelector:
19+
matchLabels:
20+
kubernetes.io/metadata.name: istio-system
21+
podSelector:
22+
matchLabels:
23+
istio: ingressgateway
24+
- namespaceSelector:
25+
matchLabels:
26+
kubernetes.io/metadata.name: monitoring
27+
podSelector:
28+
matchLabels:
29+
app: prometheus
30+
egress:
31+
- to:
32+
- namespaceSelector:
33+
matchLabels:
34+
kubernetes.io/metadata.name: monitoring
35+
podSelector:
36+
matchLabels:
37+
app: prometheus
38+
- to:
39+
- ipBlock:
40+
cidr: 10.0.0.0/8
41+
ports:
42+
- protocol: TCP
43+
port: 80
44+
- protocol: TCP
45+
port: 443
46+
- protocol: TCP
47+
port: 9093
48+
- to:
49+
- ipBlock:
50+
cidr: 192.168.0.0/16
51+
ports:
52+
- protocol: TCP
53+
port: 9093
54+
- protocol: TCP
55+
port: 443
56+
- to:
57+
- ipBlock:
58+
cidr: 0.0.0.0/0
59+
except:
60+
- 192.168.0.0/16

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/kube-state-metrics/kustomization.yaml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: monitoring
5+
resources:
6+
- ../../../../../apps/monitoring/kube-state-metrics
7+
components:
8+
- ../../../../../apps/monitoring/kube-state-metrics/components/rbac

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/kustomization.yaml‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: monitoring
5+
resources:
6+
- namespace.yaml
7+
- blackbox-exporter
8+
- karma
9+
- kube-state-metrics
10+
- prometheus
11+
- pushgateway
12+
- vmalert
13+
components:
14+
- ../../../../apps/monitoring/components/tls-client-cert
15+
- ../../../../apps/monitoring/components/reverse-proxy
16+
- ../../../../apps/monitoring/components/reverse-proxy-istio
17+
patches:
18+
- target:
19+
kind: VirtualService
20+
name: monitoring-reverse-proxy
21+
patch: |-
22+
- op: "replace"
23+
path: "/spec/hosts"
24+
value:
25+
- "monitoring.svc.dd.soeren.cloud"
26+
- target:
27+
kind: Issuer
28+
name: vault-issuer
29+
patch: |-
30+
- op: "replace"
31+
path: "/spec/vault/auth/kubernetes/mountPath"
32+
value: "/v1/auth/svc.dd.soeren.cloud"

‎clusters/argo-svc.dd.soeren.cloud/k8s-infra/monitoring/namespace.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
kind: Namespace
3+
apiVersion: v1
4+
metadata:
5+
name: monitoring
6+
labels:
7+
name: monitoring

0 commit comments

Comments
 (0)