feat(halo): 增加halo配置 & 优化apps结构

2024-08-14 14:11:36 +08:00
@@ -0,0 +1,60 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: crowdsec
+  namespace: infra-monitor
+spec:
+  repo: https://crowdsecurity.github.io/helm-charts
+  chart: crowdsec
+  targetNamespace: infra-monitor
+  version: 0.11.0
+  valuesContent: |-
+    container_runtime: containerd
+    image:
+      tag: v1.6.1-2
+    config:
+      config.yaml.local: |
+        db_config:
+          type: postgresql
+          host: cnpg-cluster-hk-rw.infra-data
+          port: 5432
+          db_name: crowdsec
+          user: app
+          password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
+          sslmode: require
+    agent:
+      nodeSelector:
+        svccontroller.k3s.cattle.io/enablelb: "true"
+        # 由于使用了loki搜集日志 此处不再需要 所以使用此标签 禁用所有的agent
+        crowdsec/enabled: "true"
+      acquisition:
+        - namespace: infra-net
+          podName: ingress-nginx-controller-*
+          program: nginx
+          poll_without_inotify: true
+      env:
+        - name: COLLECTIONS
+          value: "crowdsecurity/nginx"
+    lapi:
+      affinity:
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - preference:
+                matchExpressions:
+                  - key: topology.kubernetes.io/region
+                    operator: In
+                    values:
+                      - cn-hk
+              weight: 1
+      resources:
+        limits:
+          memory: 200Mi
+        requests:
+          cpu: 150m
+          memory: 100Mi
+      persistentVolume:
+        config:
+          enabled: false
+        data:
+          enabled: false
+
@@ -0,0 +1,54 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: loki
+  namespace: infra-monitor
+spec:
+  repo: https://grafana.github.io/helm-charts
+  chart: loki
+  targetNamespace: infra-monitor
+  version: 6.7.1
+  valuesContent: |-
+    deploymentMode: SingleBinary
+    gateway:
+      enabled: false
+    lokiCanary:
+      nodeSelector:
+        svccontroller.k3s.cattle.io/enablelb: "true"
+      extraArgs:
+        # 降低测试日志生成条数
+        - -interval=30s
+    resultsCache:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+      allocatedMemory: 1024
+    chunksCache:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+      allocatedMemory: 1024
+    loki:
+      auth_enabled: false
+      commonConfig:
+        replication_factor: 1
+      storage:
+        type: 'filesystem'
+      schemaConfig:
+        configs:
+        - from: "2024-01-01"
+          store: tsdb
+          index:
+            prefix: loki_index_
+            period: 24h
+          object_store: filesystem
+          schema: v13
+    singleBinary:
+      replicas: 1
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+    read:
+      replicas: 0
+    backend:
+      replicas: 0
+    write:
+      replicas: 0
+
@@ -0,0 +1,24 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: loki-promtail
+  namespace: infra-monitor
+spec:
+  repo: https://grafana.github.io/helm-charts
+  chart: promtail
+  targetNamespace: infra-monitor
+  version: 6.7.1
+  valuesContent: |-
+    nodeSelector:
+      svccontroller.k3s.cattle.io/enablelb: "true"
+    configmap:
+      enabled: true
+    config:
+      clients:
+        - url: http://loki.infra-monitor:3100/loki/api/v1/push
+          tenant_id: 1
+      snippets:
+        extraRelabelConfigs:
+          - source_labels: [__meta_kubernetes_pod_label_log_collecting_enabled]
+            action: keep
+            regex: true
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: infra-monitor
@@ -0,0 +1,105 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: prometheus
+  namespace: infra-monitor
+spec:
+  repo: https://prometheus-community.github.io/helm-charts
+  chart: kube-prometheus-stack
+  targetNamespace: infra-monitor
+  version: 59.1.0
+  valuesContent: |-
+    kubeControllerManager:
+      enabled: false
+    kubeScheduler:
+      enabled: false
+    kubeProxy:
+      enabled: false
+    kubeEtcd:
+      enabled: false
+
+    prometheusOperator:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+        
+    kube-state-metrics:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+              
+    grafana:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+      ingress:
+        enabled: true
+        ingressClassName: nginx
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /
+      assertNoLeakedSecrets: false
+      grafana.ini:
+        help:
+          enabled: false
+        news:
+          news_feed_enabled: false
+        database:
+          type: postgres
+          host: cnpg-cluster-hk-rw.infra-data:5432
+          name: grafana
+          user: app
+          password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
+          
+      persistence:
+        type: pvc
+        enabled: true
+        storageClassName: local-path
+        accessModes:
+          - ReadWriteOnce
+        size: 10Gi
+        
+    prometheus:
+      prometheusSpec:
+        nodeSelector:
+          kubernetes.io/hostname: alihka
+        storageSpec:
+          volumeClaimTemplate:
+            spec:
+              storageClassName: local-path
+              accessModes:
+                - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 30Gi
+        routePrefix: /prometheus
+        serviceMonitorSelectorNilUsesHelmValues: false
+        podMonitorSelectorNilUsesHelmValues: false
+        ruleSelectorNilUsesHelmValues: false
+      ingress:
+        enabled: false
+        ingressClassName: nginx
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /prometheus
+                
+    alertmanager:
+      alertmanagerSpec:
+        nodeSelector:
+          kubernetes.io/hostname: alihka
+        storage: 
+          volumeClaimTemplate:
+            spec:
+              storageClassName: local-path
+              accessModes:
+                - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 10Gi
+        routePrefix: /alertmanager
+      ingress:
+        enabled: false
+        ingressClassName: nginx
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /alertmanager
@@ -0,0 +1,30 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: grafana-static
+  namespace: infra-monitor
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.ingress.kubernetes.io/proxy-buffering: "on"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      proxy_cache cache;
+      proxy_cache_valid 200 302 7d;
+      proxy_cache_valid 404 10m;
+      proxy_cache_valid any 1h;
+      proxy_cache_use_stale error timeout updating http_404 http_500 http_502 http_503 http_504;
+      proxy_cache_bypass $http_x_purge;
+      proxy_ignore_headers Cache-Control;
+      add_header X-Cache-Status $upstream_cache_status;
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: monitor.dev.cm
+      http:
+        paths:
+          - path: /(.*\.(css|js|png|jpg|jpeg|gif|svg|webp|ico|woff|woff2|ttf|eot)|avatars/[^/]+)$
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: prometheus-grafana
+                port:
+                  number: 80