feat(query-exposer): Deploy instance on cluster

This patch deploys the query-exposer to the cluster, providing insight into the current alert situation and this way, allow polled notifications.

feat(query-exposer): Deploy instance on cluster
94836e05 · Sheogorath · 8b41b3e4 · 94836e05 · 94836e05 · 94836e05
Verified Commit 94836e05 authored 2 years ago by Sheogorath
--- a/clusters/k8s01/monitoring/certificate.yaml
+++ b/clusters/k8s01/monitoring/certificate.yaml
@@ -5,9 +5,7 @@ metadata:
    namespace: monitoring-system
 spec:
    dnsNames:
-        - ENC[AES256_GCM,data:FausJT725sGrYNleSKOf0cmKv9FZmbD/1pm830i75tjiRuw=,iv:TFTg6q8mHbRKIDsf8liCcWyTLOoxQCy/CU1NbTmsOjg=,tag:IrfDl6hj4mz0YOAo0INIxg==,type:str]
+        - ENC[AES256_GCM,data:TuQrdYefrFcNkO5f3IaymiTca+/It5Mnb4ZqPaea,iv:RACqGkpsHIzrqi6Rw0L7hA0mXSNS4lCm82uJ7uH7dtE=,tag:3ERK1DWF/NrTJy741BB1fw==,type:str]
-        - ENC[AES256_GCM,data:JJFgT3/dSSP63Df5pteQxGCh16UaHypGZhFBAT1GfCn0EZCm,iv:sj+tVKfOtcLVK9NLJRP40HFhkD9Jg8ZFolPFy40wA9Q=,tag:T5KeXCpUw/RBMkNOuY3tHg==,type:str]
-        - ENC[AES256_GCM,data:r1b3oJy97llLylgHbXA2dTjjl8CbtQm+t0DFodKCq9aB/3TqUyM=,iv:OdMQDjR/Hsj77/1RChADEgCQZ2zArw1OW36DoaQbMuE=,tag:cOhPf3RdvS5phoLNRduMhg==,type:str]
    issuerRef:
        name: letsencrypt
        kind: ClusterIssuer
@@ -18,8 +16,8 @@ sops:
    azure_kv: []
    hc_vault: []
    age: []
-    lastmodified: "2022-02-02T19:02:32Z"
+    lastmodified: "2022-11-23T03:44:10Z"
-    mac: ENC[AES256_GCM,data:jzMEzcvIAhFm4GkBCyUJvc5GU6EcysN2voIMlnixY62dVFW/PT+7x6YmGO2Nm4ga7drQqezz4Jd/2aj9j0jT1QK/S54v0nqRLDqzuz6qd0YsSVt6ooBWlI91OEQcKNjpWIBpVzRKrxyjURhtBVYdidhdwgG1mCO81gVi5q/8hoE=,iv:tEEGYs1gy6nXWAguKTtnC5eGlVac/r60s/2jjtvUFiY=,tag:/ZSU+yaBkUWntCAsb7eMGA==,type:str]
+    mac: ENC[AES256_GCM,data:N3dVlzv0Xebss6LIdbTO+Yy8DGFHAS7hR1HiMiujlkSVgPoSYA98VNA+YuQPilALqfeCnQE8DEPcfAlO2moKKMQ025iPwumLsqq3lbVKyyepTxgT+BbZoTJlQlPa+myha2+LNxCNokr1c4kdRiO/VowrjHc1pV+K2LQ9dSezNR0=,iv:7Od/ULC7Tw7lxLDIGIcovWh7ZU2pSZ0o5yWlSfFPI3A=,tag:epTm/UZFRe9p2OEt26iFxA==,type:str]
    pgp:
        - created_at: "2022-01-21T18:13:48Z"
          enc: |-
@@ -63,4 +61,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$
-    version: 3.7.1
+    version: 3.7.3
--- a/clusters/k8s01/monitoring/kustomization.yaml
+++ b/clusters/k8s01/monitoring/kustomization.yaml
@@ -7,3 +7,4 @@ resources:
 - release-override.yaml
 - json-exporter-override.yaml
 - aws.yaml
+- query-exposer.yaml
--- a/clusters/k8s01/monitoring/query-exposer.yaml
+++ b/clusters/k8s01/monitoring/query-exposer.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+    labels:
+        app.kubernetes.io/name: query-exposer
+    name: query-exposer
+    namespace: monitoring-system
+spec:
+    replicas: 2
+    selector:
+        matchLabels:
+            app.kubernetes.io/name: query-exposer
+    template:
+        metadata:
+            labels:
+                app.kubernetes.io/name: query-exposer
+        spec:
+            affinity:
+                podAntiAffinity:
+                    requiredDuringSchedulingIgnoredDuringExecution:
+                        - labelSelector:
+                            matchLabels:
+                                app.kubernetes.io/name: query-exposer
+                          topologyKey: kubernetes.io/hostname
+            containers:
+                - image: quay.io/shivering-isles/query-exposer:0.1.0
+                  name: query-exposer
+                  args:
+                    - -h
+                    - http://kube-prometheus-stack-prometheus:9090
+                    - -q='(label_replace(vector(0), "severity", "info", "__name__", ".*") orlabel_replace(vector(2^0), "severity", "warning", "__name__", ".*") or label_replace(vector(2^1), "severity", "critical", "__name__", ".*")) + (sum by (severity) (ALERTS) * 0)'
+                  resources:
+                    requests:
+                        cpu: 15m
+                        memory: 128Mi
+                    limits:
+                        cpu: 20m
+                        memory: 256Mi
+                  ports:
+                    - containerPort: 8080
+                      name: http
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Service
+metadata:
+    labels:
+        app.kubernetes.io/name: query-exposer
+    name: query-exposer
+    namespace: monitoring-system
+spec:
+    ports:
+        - name: http
+          port: 80
+          protocol: TCP
+          targetPort: 8080
+    selector:
+        app.kubernetes.io/name: query-exposer
+    type: ClusterIP
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    labels:
+        app.kubernetes.io/name: query-exposer
+    name: query-exposer
+    namespace: monitoring-system
+spec:
+    rules:
+        - host: ENC[AES256_GCM,data:/cnqy/aRc1gOpOssTAppuRPV4wzbH7Ujb8Bbo9otiYGVufTCwWi1Wn9cP+eF,iv:ggZ7WiDuz7LJ2s/Kqey5TO6JOdPWFRhn80i75d6g+zs=,tag:9QdtcFiVOcqCn7zfE8F4PA==,type:str]
+          http:
+            paths:
+                - backend:
+                    service:
+                        name: query-exposer
+                        port:
+                            name: http
+                  path: /
+                  pathType: Prefix
+    tls:
+        - hosts:
+            - ENC[AES256_GCM,data:WugbS5o0ooSlVXV8R9kVRdl5NYwiBhilRO47Tw6CilFG0Aa6YDi1IMbx/X4C,iv:U2BdiSI0IZVtjirjU1yHiqPxrvAiCue7k6Jubqrx2EI=,tag:eIzT3xL64hfHi7/W1e6YMw==,type:str]
+          secretName: ingress-monitoring-tls
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+    name: query-exposer
+    namespace: monitoring-system
+    labels:
+        app.kubernetes.io/name: query-exposer
+spec:
+    minAvailable: 1
+    selector:
+        matchLabels:
+            app.kubernetes.io/name: query-exposer
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+    name: allow-ingress-to-query-exposer
+    namespace: monitoring-system
+    labels:
+        app.kubernetes.io/name: query-exposer
+spec:
+    podSelector:
+        matchLabels:
+            app: query-exposer
+    ingress:
+        - from:
+            - namespaceSelector:
+                matchLabels:
+                    ingress.shivering-isles.com/network-access-required: "true"
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+    name: query-exposer-tls
+    namespace: monitoring-system
+spec:
+    dnsNames:
+        - ENC[AES256_GCM,data:S/6/nd42DrqaWLSWKZPG1355pMaJhWHTZVrjpcLTG89jpnA=,iv:BX3Lnev9zdrc9SO0tDjSKgt/co7m4YzxQGZlaT3YQJQ=,tag:MkbArQxWJYdkFwQsF5Fpzw==,type:str]
+        - ENC[AES256_GCM,data:J0N++JnbcSp1RPEoL7yZ9wWiQ4wPq/gsUq/RNjp3FGrqxsoq,iv:aw7R7uOE2aMp1RHtheotrauhtTdIuf8l5PjSTcZET+c=,tag:5djslm3Aucj9na/K28tz1g==,type:str]
+        - ENC[AES256_GCM,data:O19nND0ruKLWOw/e02I9tjMrb55vXxsDIo9k1pt1n+7qaPvI8gg=,iv:vmMXASot9/PkZF2YteQmKlbAsxHW0DRD2hPzlxt2uSQ=,tag:JPzQ7ddSKcGPyr/9Ze0DNg==,type:str]
+    issuerRef:
+        name: letsencrypt
+        kind: ClusterIssuer
+    secretName: ingress-monitoring-tls
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-11-23T03:46:10Z"
+    mac: ENC[AES256_GCM,data:yc0HUE6Opt7YpAeO3DYqvwTViJ93257aKa8FQ7wmTlCCejbuNiapXCYgp27ZUK5P4vWPT3lwZqv8JnuTjCfPOqLNVitJ23jR+gmkGUAJyWcW9tiZBq/07eIVQ0oeWot5kcuRiqAoZ9QQY45ybkyaCN/wxx/IILWTYtnorywxI1c=,iv:snropopf90CE31d4YJ6RKuHgJId+8E/DzpF6RSFVDzk=,tag:e4MjXclBMTT9CDF5dGVW5w==,type:str]
+    pgp:
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+            wcFMA7kpg2bgzVHcAQ/7BXZ7VVCZFYXIorhJHnx2EsjEETW7KcsXHTQoAvb5rmMe
+            471q+XKXX8Kll0P2Ojp83C/veu38halkkOh2mHbOdoM+J8ISvLTco8+lCEgQ3mpO
+            ZaN25VL3S8ccE1FbOPT9bj213qnbkclHdXP2EchGWH41JxZYCp7z3SDjnJyPjISZ
+            IBX79jZt7Ktkk6/bC/IsXJDf9yRV9MrHGAsL+Krw1hOdJ+KRmbj3d9ix8RLruFfA
+            qLoDunPdw0Byn+GdcQ+ortZOTlradSqaOch4qsazmrYvZoS5K40+943UUmOPAteg
+            8M40mEzW1iqiJNIISopCmrS7abkOhB4MEukQ8nWjR2Fu7kTTYEi34F9/5GdXktlp
+            oB43gDhErs9xhhbkxj+GusArhPEhJn2XiKp76pSzAsVp0UPVhrKRT1tmpwSlMYe/
+            DwNniTvPV8dMsYosHVjT75F5m20LQ87TKX3QbsQbbpAT+pogBoBVjS/qCwEexaEy
+            V9cFC1BuU0gsR+Cx/QMD2IeDlZ6wt5SCNzS/gesftaFOKh38x9t3AvpkYd+9Ljs5
+            l2zUv5WCLrOqClyIXD4nZd2Jn3M7VIZOeTYqXESyAehLYvIG4R4NUHO28xVGiAOb
+            YGwlvgPtDW6QIB+RmidxIDGfzHr2WiWtlXfYVpIDU2KQfHnB8RGFFA93+qIlywTS
+            UQFGfmSMacOKva+1OiLcXt5SHnV85DI8BdZ39qIL3n+MwUKXLe0M78Zk03Ima+zq
+            lneM8g9CF8j94DA7G1xJag1r86M9m6bTmTjYnEoSNVslhw==
+            =E5oF
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-11-23T03:44:38Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+            hQIMA4oYbIHZIrAPARAAtKx1qpPE/E8Xd6Mv4RzIBNH2dhzXlrATb7wo1xiZQoQZ
+            DgCMGP9xRfDHkSici0Z//EtV7s/XNPQviGnbKDrhq4cEm1a61yI8WihiQkxKwSWo
+            f22tdfJs10uLNOPNwAu/w7UPPGykJXesRCA6aQhRkg6m7IJHhdqzKnCkW3ObU4Rr
+            3KvFf51aqXVsbN2tZDWj4tOyFQtcv7EkhllMj90rt6rB9TLAVu4XHKhaEaTaCx1d
+            nzQvAFeftEwx2gWybsShho/SeoHNAGRfrfpk+pMxpncXqDTaB3Y82PdDGj9lUOik
+            kgTpNGb52ONaKNHywj33bMtxMB7u52aC8cQj3WPRjwcreoBOp+/6hg0+/Hn8pQOj
+            hs0qi2Qcxtkv9Ajm41LfSFmBZMVosf202/UJ8GJknFncS1+a6R9Loo5DjD+yPj2A
+            Zr+4k+iLGYlqo3jtKZ8HAVEYxRLp5lDxUjNZWL+TqArh1wmIsxv1AiUW2KQ9JtIo
+            j8xW5coa1gIbuD++Swnq7D8hffxRtO2cii6a2c/XC/UMJRtqyHkm1CdgWuJvZg+z
+            85e9CLg2et8WO0piWAtKqDOITmwQNyEdBFH5Axw6Hp7El4ACf2UBLKPCRvfpvFDf
+            BsQ8IGWqjN5ivGATlSg94P9njN93+MFXtQgoYjOOPEgP8vxJiOqGyU0a2676lkrU
+            aAEJAhBvd2C3AY8t41oV9/2JSBFeH1EF2ZzEbxe3axJIOQgDPmu6Gls5md8eXjSg
+            XMAJAm2u625sbqepK5E+hC/U1FBmoFF3KuJz8wFDvG84l0Ag2kcI18iPQZuVcz3W
+            JHHJ/DahwmRD
+            =tCKa
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    version: 3.7.3