feat(mastodon): Add sidekiq exporter

apps/base/mastodon/kustomization.yaml

@@ -7,6 +7,7 @@ resources:
   - release.yaml
   - database.yaml
   - redis.yaml
+  - sidekiq-monitor.yaml
   - ../../../shared/networkpolicies/allow-from-same-namespace.yaml
   - ../../../shared/networkpolicies/allow-from-ingress.yaml
   - ../../../shared/networkpolicies/allow-from-database.yaml

apps/base/mastodon/networkpolicy.yaml

@@ -14,5 +14,9 @@ metadata:
   name: allow-from-monitoring
 spec:
   podSelector:
-    matchLabels:
-      app.kubernetes.io/name: mastodon
+    matchExpressions:
+      - key:  app.kubernetes.io/name
+        operator: In
+        values:
+          - mastodon
+          - sidekiq-prometheus-exporter

apps/base/mastodon/sidekiq-monitor.yaml

+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: sidekiq-prometheus
+  namespace: mastodon
+spec:
+  interval: 30m
+  url: https://strech.github.io/sidekiq-prometheus-exporter
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: sidekiq-prometheus
+  namespace: mastodon
+spec:
+  serviceAccountName: flux-reconciler
+  timeout: 15m
+  releaseName: sidekiq-prometheus
+  chart:
+    spec:
+      chart: sidekiq-prometheus-exporter
+      sourceRef:
+        kind: HelmRepository
+        name: sidekiq-prometheus
+        namespace: mastodon
+  install:
+    remediation:
+      retries: -1
+  upgrade:
+    remediation:
+      retries: -1
+  interval: 15m
+  values:
+    env:
+      REDIS_HOST: mastodon-redis-master
+    serviceMonitor:
+      enabled: true
+    # Used to match the Upstream UID/GID
+    securityContext:
+      runAsNonRoot: true
+      runAsUser: 991
+      runAsGroup: 991
+      fsGroup: 991
+      seccompProfile:
+        type: "RuntimeDefault"
\ No newline at end of file