100 lines
2.9 KiB
TypeScript
100 lines
2.9 KiB
TypeScript
import * as pulumi from "@pulumi/pulumi";
|
|
import * as k8s from "@pulumi/kubernetes";
|
|
|
|
const config = new pulumi.Config();
|
|
|
|
const bootstrapRef = new pulumi.StackReference(
|
|
`${pulumi.getOrganization()}/k8s-bootstrap/dev`,
|
|
);
|
|
const appsRef = new pulumi.StackReference(
|
|
`${pulumi.getOrganization()}/k8s-apps/dev`,
|
|
);
|
|
|
|
const kubeconfig = bootstrapRef.requireOutput("kubeconfig");
|
|
const domain = appsRef.requireOutput("domain");
|
|
const grafanaAdminPassword = config.requireSecret("grafanaAdminPassword");
|
|
const grafanaDbUser = config.requireSecret("grafanaDbUser");
|
|
const grafanaDbPassword = config.requireSecret("grafanaDbPassword");
|
|
const grafanaDbHost = config.requireSecret("grafanaDbHost");
|
|
const grafanaDbName = config.require("grafanaDbName");
|
|
|
|
const k8sProvider = new k8s.Provider("k3s", { kubeconfig });
|
|
|
|
const monitoringNs = new k8s.core.v1.Namespace(
|
|
"monitoring",
|
|
{ metadata: { name: "monitoring" } },
|
|
{ provider: k8sProvider, import: "monitoring" },
|
|
);
|
|
|
|
const grafanaHost = pulumi.interpolate`grafana.${domain}`;
|
|
|
|
const grafanaDbSecret = new k8s.core.v1.Secret(
|
|
"grafana-db-credentials",
|
|
{
|
|
metadata: { namespace: monitoringNs.metadata.name },
|
|
stringData: { password: grafanaDbPassword },
|
|
},
|
|
{ provider: k8sProvider },
|
|
);
|
|
|
|
new k8s.helm.v3.Release(
|
|
"kube-prometheus-stack",
|
|
{
|
|
name: "kube-prometheus-stack",
|
|
chart: "kube-prometheus-stack",
|
|
version: "86.2.0",
|
|
namespace: monitoringNs.metadata.name,
|
|
repositoryOpts: {
|
|
repo: "https://prometheus-community.github.io/helm-charts",
|
|
},
|
|
timeout: 600,
|
|
values: {
|
|
grafana: {
|
|
adminPassword: grafanaAdminPassword,
|
|
replicas: 2,
|
|
ingress: {
|
|
enabled: true,
|
|
ingressClassName: "traefik",
|
|
annotations: { "cert-manager.io/cluster-issuer": "letsencrypt-prod" },
|
|
hosts: [grafanaHost],
|
|
tls: [{ secretName: "grafana-tls", hosts: [grafanaHost] }],
|
|
},
|
|
env: {
|
|
GF_DATABASE_TYPE: "postgres",
|
|
GF_DATABASE_HOST: grafanaDbHost,
|
|
GF_DATABASE_NAME: grafanaDbName,
|
|
GF_DATABASE_USER: grafanaDbUser,
|
|
GF_DATABASE_SSL_MODE: "disable",
|
|
},
|
|
envValueFrom: {
|
|
GF_DATABASE_PASSWORD: {
|
|
secretKeyRef: {
|
|
name: grafanaDbSecret.metadata.name,
|
|
key: "password",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
prometheus: {
|
|
prometheusSpec: {
|
|
retention: "7d",
|
|
retentionSize: "15GB",
|
|
scrapeInterval: "60s",
|
|
evaluationInterval: "60s",
|
|
replicas: "2",
|
|
storageSpec: {
|
|
volumeClaimTemplate: {
|
|
spec: {
|
|
storageClassName: "longhorn",
|
|
resources: { requests: { storage: "20Gi" } },
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
alertmanager: { enabled: false },
|
|
},
|
|
},
|
|
{ provider: k8sProvider, import: "monitoring/kube-prometheus-stack" },
|
|
);
|