feat(prometheus): migrate from infra repo

kube-prometheus/.gitattributes

@@ -0,0 +1 @@
+secret.*.yaml filter=age diff=age merge=age -text

kube-prometheus/config/values.prometheus.yaml

@@ -0,0 +1,128 @@
+commonLabels:
+  prometheus: default
+
+admin:
+  existingSecret: grafana-admin-credentials
+  userKey: user
+  passwordKey: password
+
+defaultRules:
+  rules:
+    etcd: false
+
+prometheus:
+  prometheusSpec:
+    retention: 7d
+    serviceMonitorNamespaceSelector:
+      matchLabels:
+        prometheus: default
+    serviceMonitorSelector:
+      matchLabels:
+        prometheus: default
+    ruleSelector:
+      matchLabels:
+        prometheus: default
+    ruleNamespaceSelector:
+      matchLabels:
+        prometheus: default
+    podMonitorSelector:
+      matchLabels:
+        prometheus: default
+    podMonitorNamespaceSelector:
+      matchLabels:
+        prometheus: default
+    resources:
+      requests:
+        memory: 3Gi
+        cpu: 500m
+      limits:
+        memory: 4Gi
+        cpu:  800m
+    storageSpec:
+      volumeClaimTemplate:
+        spec:
+          storageClassName: hcloud-volumes
+          resources:
+            requests:
+              storage: 15Gi
+
+alertmanager:
+  enabled: false
+
+kubeEtcd:
+  enabled: false
+
+kubeControllerManager:
+  enabled: true
+  endpoints: ['172.23.2.10']
+  service:
+    enabled: true
+    port: 10257
+    targetPort: 10257
+  serviceMonitor:
+    enabled: true
+    https: true
+
+kubeScheduler:
+  enabled: false
+  endpoints: ['172.23.2.10']
+  service:
+    enabled: true
+    port: 10259
+    targetPort: 10259
+  serviceMonitor:
+    enabled: true
+    https: true
+
+kubeProxy:
+  enabled: false
+  endpoints: ['172.23.2.10']
+  service:
+    enabled: true
+    port: 10249
+    targetPort: 10249
+
+grafana:
+  ingress:
+    enabled: false
+  envFromSecrets:
+    - name: grafana-auth
+    - name: grafana-db
+  grafana.ini:
+    server:
+      domain: grafana.icb4dc0.de
+      root_url: "https://%(domain)s"
+    database:
+      type: postgres
+      host: default-cluster-primary.postgres.svc:5432
+      name: grafana
+      user: "${GF_DB_USER}"
+      password: "${GF_DB_PASSWORD}"
+      ssl_mode: require
+    auth:
+      disable_login_form: true
+    auth.generic_oauth:
+        name: Forgejo
+        icon: signin
+        enabled: "true"
+        client_id: "${GF_OAUTH_CLIENT_ID}"
+        client_secret: "${GF_OAUTH_CLIENT_SECRET}"
+        empty_scopes: true
+        auth_url: https://code.icb4dc0.de/login/oauth/authorize
+        token_url: https://code.icb4dc0.de/login/oauth/access_token
+        api_url: https://code.icb4dc0.de/login/oauth/userinfo
+  persistence:
+    enabled: false
+    storageClassName: hcloud-volumes
+
+prometheus-node-exporter:
+  prometheus:
+    monitor:
+      additionalLabels:
+        prometheus: default
+
+kube-state-metrics:
+  prometheus:
+    monitor:
+      additionalLabels:
+        prometheus: default

kube-prometheus/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: observability-system
+
+resources:
+  - resources/secret.grafana-admin.yaml
+  - resources/secret.auth.yaml
+  - resources/secret.db.yaml
+
+helmCharts:
+  - name: kube-prometheus-stack
+    repo: https://prometheus-community.github.io/helm-charts
+    includeCRDs: true
+    namespace: observability-system
+    releaseName: prometheus
+    version: "58.4.0"
+    valuesFile: config/values.prometheus.yaml

kube-prometheus/resources/secret.db.yaml

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> X25519 rn+hSd2Wfsx4K1247+sw7zQ4xEyqos0TZlaChsb6Lw0
+7Z4MYesYB/tCeXfxX9TEM7RboK1WLuw0DblrZ0OyTOQ
+-> X25519 7emTMGrRAFGJABeK+SRKIt8otQjpRclQjkKl713izDQ
+2sydwj4FJugdisAD5YMdEHyOgbqYZamWA2mltUMnQ7E
+--- kSZgDff/Yk27eTxSW0dFXwZbgPUEEorPFp6MLltW3LY
+ù²†xb<78>r˜hO<ÕøùüˆkS‚–—5*W/àóÖ[ùÒ)¦œ¼sC°	}ËßÚ·„çðFiS!ä4HŸŒ
³¡›0öAÔ†ý}p¢q¬y8Ÿqèu—ÜXXó·#%tµ÷zÙ·/Bü\<5C>qpòî0ŸHxY¦¹„ùʵœàÚ<C3A0>++û‘Ùó=.²üB¦Šè|
+[*»RºDŽuì$PöÇËVÂ!Ÿå-<2D>Xn³ô»	‘w_
+SOª

kube-prometheus/resources/secret.grafana-admin.yaml

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 TB5CkVKWXtgIjRx2SogIoW8tlrujheK7Awz1p4uQEgw
+Kshy+UCwlvJy5MCHWaQKMDYtVkCg4IcbD4IrDCufogo
+-> X25519 Vw++EMzh3zlyw4CuUHMxIeqWYll8zSelk8JSeMZulww
+a8pkLwi07VXY78pa5P5xtJ6b+CK6rGRl4Uk9scpOktw
+--- 9lY1JXzQk9DlqfWGi12HVDvdGEp7KVyoSeY4k5AZBtE
+u¹<EFBFBD>Ì>ð:S<>xæsëPT@ØEÀMŠ¯S^uýfümÊÖµZ%™C.·¬­	R3‡j¤Í~º³câq[ùüúT}‡gîÿâgÎô•­.~™7í¯IŠªû†gk
ŽÞº0Òÿ<08>ÖkNp­’<C2AD>ª÷fADH~ŸE•+óö¤ö=´®¦zXc•ó¾ˆc|Æ
+Ùf€ B¶JñW
+Lœ{¶DÆ)¼™Ö~
+³àœ<EFBFBD>/DÕ›ó®X¼Ì¢MA