154 lines
		
	
	
		
			3.8 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			154 lines
		
	
	
		
			3.8 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
| kube-prometheus-stack:
 | |
|   crds:
 | |
|     enabled: false
 | |
|   defaultRules:
 | |
|     create: true
 | |
|     rules:
 | |
|       kubeControllerManager: false
 | |
|       kubeSchedulerAlerting: false
 | |
|       kubeSchedulerRecording: false
 | |
|   global:
 | |
|     rbac:
 | |
|       create: true
 | |
|       createAggregateClusterRoles: true
 | |
|   alertmanager:
 | |
|     enabled: true
 | |
|     config:
 | |
|       route:
 | |
|         group_by: ["namespace", "alertname"]
 | |
|         group_wait: 30s
 | |
|         group_interval: 5m
 | |
|         repeat_interval: 24h
 | |
|         receiver: discord
 | |
|         routes:
 | |
|           - receiver: "null"
 | |
|             matchers:
 | |
|               - alertname = "Watchdog"
 | |
|           - receiver: "pushover"
 | |
|             group_wait: 10s
 | |
|             group_interval: 5m
 | |
|             repeat_interval: 24h
 | |
|             matchers:
 | |
|               - severity = "critical"
 | |
|       receivers:
 | |
|         - name: "null"
 | |
|         - name: discord
 | |
|           discord_configs:
 | |
|             - send_resolved: true
 | |
|               webhook_url_file: /etc/alertmanager/secrets/alertmanager-config-secret/discord_webhook
 | |
|         - name: pushover
 | |
|           pushover_configs:
 | |
|             - send_resolved: true
 | |
|               user_key_file: /etc/alertmanager/secrets/alertmanager-config-secret/user_key
 | |
|               token_file: /etc/alertmanager/secrets/alertmanager-config-secret/pushover_token
 | |
|     alertmanagerSpec:
 | |
|       secrets:
 | |
|         - alertmanager-config-secret
 | |
|       replicas: 1
 | |
|   grafana:
 | |
|     enabled: false
 | |
|   kubeApiServer:
 | |
|     tlsConfig:
 | |
|       insecureSkipVerify: true
 | |
|   kubeControllerManager:
 | |
|     enabled: false
 | |
|   kubeEtcd:
 | |
|     enabled: true
 | |
|   kubeScheduler:
 | |
|     enabled: false
 | |
|   kubeProxy:
 | |
|     enabled: false
 | |
|   kubeStateMetrics:
 | |
|     enabled: true
 | |
|   nodeExporter:
 | |
|     operatingSystems:
 | |
|       darwin:
 | |
|         enabled: false
 | |
|   prometheusOperator:
 | |
|     admissionWebhooks:
 | |
|       enabled: true
 | |
|       annotations:
 | |
|         argocd.argoproj.io/hook: PreSync
 | |
|         argocd.argoproj.io/hook-delete-policy: HookSucceeded
 | |
|       patch:
 | |
|         annotations:
 | |
|           argocd.argoproj.io/hook: PreSync
 | |
|           argocd.argoproj.io/hook-delete-policy: HookSucceeded
 | |
|       mutatingWebhookConfiguration:
 | |
|         annotations:
 | |
|           argocd.argoproj.io/hook: PreSync
 | |
|       validatingWebhookConfiguration:
 | |
|         annotations:
 | |
|           argocd.argoproj.io/hook: PreSync
 | |
|     namespaces:
 | |
|       releaseNamespace: true
 | |
|       additional:
 | |
|         - kube-system
 | |
|         - kube-prometheus-stack
 | |
|         - argocd
 | |
|         - argo-workflows
 | |
|         - authentik
 | |
|         - blocky
 | |
|         - cert-manager
 | |
|         - cloudnative-pg
 | |
|         - descheduler
 | |
|         - directus
 | |
|         - external-dns
 | |
|         - freshrss
 | |
|         - generic-device-plugin
 | |
|         - gitea
 | |
|         - grafana
 | |
|         - harbor
 | |
|         - hoarder
 | |
|         - home-assistant
 | |
|         - immich
 | |
|         - jellystat
 | |
|         - komodo
 | |
|         - lidarr
 | |
|         - linkwarden
 | |
|         - loki
 | |
|         - matrix-synapse
 | |
|         - ollama
 | |
|         - outline
 | |
|         - photoview
 | |
|         - qbittorrent
 | |
|         - radarr
 | |
|         - radarr-4k
 | |
|         - radarr-anime
 | |
|         - radarr-standup
 | |
|         - reloader
 | |
|         - rook-ceph
 | |
|         - roundcube
 | |
|         - slskd
 | |
|         - sonarr
 | |
|         - sonarr-4k
 | |
|         - sonarr-anime
 | |
|         - speedtest-exporter
 | |
|         - spegel
 | |
|         - stalwart
 | |
|         - tdarr
 | |
|         - traefik
 | |
|         - trivy
 | |
|         - unpoller
 | |
|         - vault
 | |
|         - vaultwarden
 | |
|         - volsync
 | |
|   prometheus:
 | |
|     ingress:
 | |
|       enabled: false
 | |
|     prometheusSpec:
 | |
|       scrapeInterval: 30s
 | |
|       retention: 30d
 | |
|       externalUrl: https://prometheus.alexlebens.net
 | |
|       serviceMonitorSelectorNilUsesHelmValues: false
 | |
|       podMonitorSelectorNilUsesHelmValues: false
 | |
|       scrapeConfigSelectorNilUsesHelmValues: false
 | |
|       storageSpec:
 | |
|         volumeClaimTemplate:
 | |
|           spec:
 | |
|             storageClassName: synology-iscsi-delete
 | |
|             accessModes: ["ReadWriteOnce"]
 | |
|             resources:
 | |
|               requests:
 | |
|                 storage: 200Gi
 |