From 94836e058964f19d011b0eb784f37a6094e7eef7 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Wed, 23 Nov 2022 04:47:09 +0100
Subject: [PATCH] feat(query-exposer): Deploy instance on cluster
This patch deploys the query-exposer to the cluster, providing
insight into the current alert situation and this way, allow
polled notifications.
---
clusters/k8s01/monitoring/certificate.yaml | 10 +-
clusters/k8s01/monitoring/kustomization.yaml | 1 +
clusters/k8s01/monitoring/query-exposer.yaml | 439 +++++++++++++++++++
3 files changed, 444 insertions(+), 6 deletions(-)
create mode 100644 clusters/k8s01/monitoring/query-exposer.yaml
diff --git a/clusters/k8s01/monitoring/certificate.yaml b/clusters/k8s01/monitoring/certificate.yaml
index 4685270f0..9da4d8de7 100644
--- a/clusters/k8s01/monitoring/certificate.yaml
+++ b/clusters/k8s01/monitoring/certificate.yaml
@@ -5,9 +5,7 @@ metadata:
namespace: monitoring-system
spec:
dnsNames:
- - ENC[AES256_GCM,data:FausJT725sGrYNleSKOf0cmKv9FZmbD/1pm830i75tjiRuw=,iv:TFTg6q8mHbRKIDsf8liCcWyTLOoxQCy/CU1NbTmsOjg=,tag:IrfDl6hj4mz0YOAo0INIxg==,type:str]
- - ENC[AES256_GCM,data:JJFgT3/dSSP63Df5pteQxGCh16UaHypGZhFBAT1GfCn0EZCm,iv:sj+tVKfOtcLVK9NLJRP40HFhkD9Jg8ZFolPFy40wA9Q=,tag:T5KeXCpUw/RBMkNOuY3tHg==,type:str]
- - ENC[AES256_GCM,data:r1b3oJy97llLylgHbXA2dTjjl8CbtQm+t0DFodKCq9aB/3TqUyM=,iv:OdMQDjR/Hsj77/1RChADEgCQZ2zArw1OW36DoaQbMuE=,tag:cOhPf3RdvS5phoLNRduMhg==,type:str]
+ - ENC[AES256_GCM,data:TuQrdYefrFcNkO5f3IaymiTca+/It5Mnb4ZqPaea,iv:RACqGkpsHIzrqi6Rw0L7hA0mXSNS4lCm82uJ7uH7dtE=,tag:3ERK1DWF/NrTJy741BB1fw==,type:str]
issuerRef:
name: letsencrypt
kind: ClusterIssuer
@@ -18,8 +16,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-02-02T19:02:32Z"
- mac: ENC[AES256_GCM,data:jzMEzcvIAhFm4GkBCyUJvc5GU6EcysN2voIMlnixY62dVFW/PT+7x6YmGO2Nm4ga7drQqezz4Jd/2aj9j0jT1QK/S54v0nqRLDqzuz6qd0YsSVt6ooBWlI91OEQcKNjpWIBpVzRKrxyjURhtBVYdidhdwgG1mCO81gVi5q/8hoE=,iv:tEEGYs1gy6nXWAguKTtnC5eGlVac/r60s/2jjtvUFiY=,tag:/ZSU+yaBkUWntCAsb7eMGA==,type:str]
+ lastmodified: "2022-11-23T03:44:10Z"
+ mac: ENC[AES256_GCM,data:N3dVlzv0Xebss6LIdbTO+Yy8DGFHAS7hR1HiMiujlkSVgPoSYA98VNA+YuQPilALqfeCnQE8DEPcfAlO2moKKMQ025iPwumLsqq3lbVKyyepTxgT+BbZoTJlQlPa+myha2+LNxCNokr1c4kdRiO/VowrjHc1pV+K2LQ9dSezNR0=,iv:7Od/ULC7Tw7lxLDIGIcovWh7ZU2pSZ0o5yWlSfFPI3A=,tag:epTm/UZFRe9p2OEt26iFxA==,type:str]
pgp:
- created_at: "2022-01-21T18:13:48Z"
enc: |-
@@ -63,4 +61,4 @@ sops:
-----END PGP MESSAGE-----
fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$
- version: 3.7.1
+ version: 3.7.3
diff --git a/clusters/k8s01/monitoring/kustomization.yaml b/clusters/k8s01/monitoring/kustomization.yaml
index c24f81859..9511484f2 100644
--- a/clusters/k8s01/monitoring/kustomization.yaml
+++ b/clusters/k8s01/monitoring/kustomization.yaml
@@ -7,3 +7,4 @@ resources:
- release-override.yaml
- json-exporter-override.yaml
- aws.yaml
+- query-exposer.yaml
diff --git a/clusters/k8s01/monitoring/query-exposer.yaml b/clusters/k8s01/monitoring/query-exposer.yaml
new file mode 100644
index 000000000..08a751301
--- /dev/null
+++ b/clusters/k8s01/monitoring/query-exposer.yaml
@@ -0,0 +1,439 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app.kubernetes.io/name: query-exposer
+ name: query-exposer
+ namespace: monitoring-system
+spec:
+ replicas: 2
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: query-exposer
+ template:
+ metadata:
+ labels:
+ app.kubernetes.io/name: query-exposer
+ spec:
+ affinity:
+ podAntiAffinity:
+ requiredDuringSchedulingIgnoredDuringExecution:
+ - labelSelector:
+ matchLabels:
+ app.kubernetes.io/name: query-exposer
+ topologyKey: kubernetes.io/hostname
+ containers:
+ - image: quay.io/shivering-isles/query-exposer:0.1.0
+ name: query-exposer
+ args:
+ - -h
+ - http://kube-prometheus-stack-prometheus:9090
+ - -q='(label_replace(vector(0), "severity", "info", "__name__", ".*") orlabel_replace(vector(2^0), "severity", "warning", "__name__", ".*") or label_replace(vector(2^1), "severity", "critical", "__name__", ".*")) + (sum by (severity) (ALERTS) * 0)'
+ resources:
+ requests:
+ cpu: 15m
+ memory: 128Mi
+ limits:
+ cpu: 20m
+ memory: 256Mi
+ ports:
+ - containerPort: 8080
+ name: http
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
+---
+apiVersion: v1
+kind: Service
+metadata:
+ labels:
+ app.kubernetes.io/name: query-exposer
+ name: query-exposer
+ namespace: monitoring-system
+spec:
+ ports:
+ - name: http
+ port: 80
+ protocol: TCP
+ targetPort: 8080
+ selector:
+ app.kubernetes.io/name: query-exposer
+ type: ClusterIP
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ labels:
+ app.kubernetes.io/name: query-exposer
+ name: query-exposer
+ namespace: monitoring-system
+spec:
+ rules:
+ - host: ENC[AES256_GCM,data:/cnqy/aRc1gOpOssTAppuRPV4wzbH7Ujb8Bbo9otiYGVufTCwWi1Wn9cP+eF,iv:ggZ7WiDuz7LJ2s/Kqey5TO6JOdPWFRhn80i75d6g+zs=,tag:9QdtcFiVOcqCn7zfE8F4PA==,type:str]
+ http:
+ paths:
+ - backend:
+ service:
+ name: query-exposer
+ port:
+ name: http
+ path: /
+ pathType: Prefix
+ tls:
+ - hosts:
+ - ENC[AES256_GCM,data:WugbS5o0ooSlVXV8R9kVRdl5NYwiBhilRO47Tw6CilFG0Aa6YDi1IMbx/X4C,iv:U2BdiSI0IZVtjirjU1yHiqPxrvAiCue7k6Jubqrx2EI=,tag:eIzT3xL64hfHi7/W1e6YMw==,type:str]
+ secretName: ingress-monitoring-tls
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+ name: query-exposer
+ namespace: monitoring-system
+ labels:
+ app.kubernetes.io/name: query-exposer
+spec:
+ minAvailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/name: query-exposer
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+ name: allow-ingress-to-query-exposer
+ namespace: monitoring-system
+ labels:
+ app.kubernetes.io/name: query-exposer
+spec:
+ podSelector:
+ matchLabels:
+ app: query-exposer
+ ingress:
+ - from:
+ - namespaceSelector:
+ matchLabels:
+ ingress.shivering-isles.com/network-access-required: "true"
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+ name: query-exposer-tls
+ namespace: monitoring-system
+spec:
+ dnsNames:
+ - ENC[AES256_GCM,data:S/6/nd42DrqaWLSWKZPG1355pMaJhWHTZVrjpcLTG89jpnA=,iv:BX3Lnev9zdrc9SO0tDjSKgt/co7m4YzxQGZlaT3YQJQ=,tag:MkbArQxWJYdkFwQsF5Fpzw==,type:str]
+ - ENC[AES256_GCM,data:J0N++JnbcSp1RPEoL7yZ9wWiQ4wPq/gsUq/RNjp3FGrqxsoq,iv:aw7R7uOE2aMp1RHtheotrauhtTdIuf8l5PjSTcZET+c=,tag:5djslm3Aucj9na/K28tz1g==,type:str]
+ - ENC[AES256_GCM,data:O19nND0ruKLWOw/e02I9tjMrb55vXxsDIo9k1pt1n+7qaPvI8gg=,iv:vmMXASot9/PkZF2YteQmKlbAsxHW0DRD2hPzlxt2uSQ=,tag:JPzQ7ddSKcGPyr/9Ze0DNg==,type:str]
+ issuerRef:
+ name: letsencrypt
+ kind: ClusterIssuer
+ secretName: ingress-monitoring-tls
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age: []
+ lastmodified: "2022-11-23T03:46:10Z"
+ mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+ pgp:
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |-
+ -----BEGIN PGP MESSAGE-----
+
+ wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+ 471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+ ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+ IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+ qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+ 8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+ oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+ DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+ V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+ l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+ YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+ UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+ lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+ =E5oF
+ -----END PGP MESSAGE-----
+ fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+ - created_at: "2022-11-23T03:44:38Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+ DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+ f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+ 3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+ nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+ kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+ hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+ Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+ j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+ 85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+ BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+ aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+ XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+ JHHJ/DahwmRD
+ =tCKa
+ -----END PGP MESSAGE-----
+ fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+ encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+ version: 3.7.3
--
GitLab