wip: helmfileify

2025-06-02 22:25:06 +02:00
parent 65d65ea126
commit a0a0f8586d
73 changed files with 1491 additions and 121 deletions
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - _manifest.yaml
@@ -0,0 +1,4 @@
+generatorOptions:
+  disableNameSuffixHash: true
+resources:
+  - ../base
@@ -0,0 +1,38 @@
+{{- if .Values.clusterConfig.argo.enabled }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: tempo 
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: tempo
+    server: 'https://kubernetes.default.svc'
+  sources:
+  - repoURL: {{ .Values.clusterConfig.manifests }}
+    targetRevision: HEAD
+    path: helmfiles/tempo
+    plugin:
+      name: helmfile
+      env:
+      - name: CLUSTER_NAME
+        value: {{ .Values.clusterConfig.cluster }}
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: sys
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      # - ServerSideApply=true
+    {{- if .Values.tempo.autosync }}
+    automated:
+      prune: true
+      # selfHeal: false
+    {{- end }}
+{{- end }}
@@ -0,0 +1,12 @@
+tempo:
+  enabled: true
+  autosync: true
+  s3:
+    endpoint: ""
+    region: ""
+    insecure_skip_verify: false
+  secret:
+    name: ""
+    access_key: ""
+    access_secret: ""
+  bucketName: ""
@@ -0,0 +1,53 @@
+tempo:
+    reportingEnabled: false
+    storage:
+    trace:
+        backend: s3
+        s3:
+        bucket: {{ .Values.tempo.bucketName | default "tempo-traces" }}
+        endpoint: {{ .Values.tempo.s3.endpoint | default "https://s3.production.itpartner.no" }}
+        prefix: traces
+        access_key: ${S3KEY}
+        secret_key: ${S3SECRET}
+        forcepathstyle: true
+        region: us-east-1
+        {{- if .Values.tempo.s3.insecure_skip_verify }}
+        tls_insecure_skip_verify: true
+        {{- end }}
+        local:
+        path: /var/tempo/traces
+        wal:
+        path: /var/tempo/wal
+    metricsGenerator:
+    enabled: true
+    remoteWriteUrl: "http://prom-prometheus.prometheus:9090/api/v1/write"
+    extraArgs: { config.expand-env=true }
+    extraEnv:
+    - name: S3KEY
+    valueFrom:
+        secretKeyRef:
+        name: {{ .Values.tempo.secret.name | default "s3-credentials"}}
+        key: {{ .Values.tempo.secret.access_key | default "access_key" }}
+    - name: S3SECRET
+    valueFrom:
+        secretKeyRef:
+        name: {{ .Values.tempo.secret.name | default "s3-credentials"}}
+        key: {{ .Values.tempo.secret.access_key | default "access_secret" }}
+tempoQuery:
+    ingress:
+    enabled: true
+    ingressClassName: nginx
+    annotations:
+        cert-manager.io/cluster-issuer: {{ .Values.cluster_config.ingress_clusterissuer }}
+        nginx.ingress.kubernetes.io/ssl-redirect: "true"
+        {{- with .Values.cluster_config.ingress_whitelist_ips }}
+        nginx.ingress.kubernetes.io/whitelist-source-range: {{ join "," . }}
+        {{- end }}
+    path: /
+    pathType: Prefix
+    hosts:
+        - query.tempo.{{ .Values.cluster_config.domain }}
+    tls:
+        - secretName: tempo-query-tls
+        hosts:
+            - query.tempo.{{ .Values.cluster_config.domain }}