# monitoring

This file provides guidance to Claude Code when working in `05-monitoring`. See the [repo-root CLAUDE.md](../CLAUDE.md) for shared conventions, deployment order, and CI/CD.

Monitoring stack (Prometheus + Grafana) via the `kube-prometheus-stack` Helm chart. Reads `kubeconfig` from `k8s-bootstrap` and `domain` from `k8s-apps`, both via StackReference.

## Common Commands

```bash
npm install
pulumi up --yes
```

## Architecture

- Namespace `monitoring`
- `kube-prometheus-stack` Helm release (chart v86.2.0)
  - Grafana: ingress at `grafana.<domain>` (`traefik`, `letsencrypt-prod`), `longhorn` PVC (2Gi)
  - Prometheus: `longhorn` PVC (20Gi) via `volumeClaimTemplate`
  - Alertmanager disabled

## Key Notes

- The `monitoring` namespace and the Helm release both use the Pulumi `import` resource option (`monitoring`, `monitoring/kube-prometheus-stack`) — they were adopted from pre-existing cluster resources rather than created fresh. Be careful with renames or changes that would force a replace.

## Required Pulumi config

```bash
pulumi config set --secret grafanaAdminPassword <password>
```

## CI/CD

Workflow: `../.gitea/workflows/05-deploy-monitoring.yaml`. Secret: `MONITORING_PULUMI_DEV_YAML`.