test: flux local cluster setup with infra-devops post

2026-03-25 12:08:55 +08:00
@@ -0,0 +1,119 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: prometheus
+  namespace: infra-monitor
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: kube-prometheus-stack
+      version: 81.6.5
+      sourceRef:
+        kind: HelmRepository
+        name: prometheus-community
+        namespace: infra-gitops
+      interval: 12h
+  install:
+    crds: CreateReplace
+  upgrade:
+    crds: CreateReplace
+  values:
+    kubeControllerManager:
+      enabled: false
+    kubeScheduler:
+      enabled: false
+    kubeProxy:
+      enabled: false
+    kubeEtcd:
+      enabled: false
+
+    prometheusOperator: {}
+
+    kube-state-metrics: {}
+
+    grafana:
+      ingress:
+        enabled: true
+        ingressClassName: nginx
+        annotations:
+          nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+          nginx.ingress.kubernetes.io/configuration-snippet: |
+            proxy_set_header Accept-Encoding "";
+            subs_filter_types text/html;
+            subs_filter '<(script|img|link)([^>]*) (src|href)="/' '<$1$2 $3="https://cdn.fillcode.com/monitor-dev-cm/' ri;
+            subs_filter 'url\(\/' 'url(https://cdn.fillcode.com/monitor-dev-cm/' ri;
+            subs_filter '<head>' '<head><script src="/__static/pwa-cdn.js"></script>' ri;
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /
+      assertNoLeakedSecrets: false
+      envValueFrom:
+        GF_DATABASE_PASSWORD:
+          secretKeyRef:
+            name: cnpg17-cluster-sh-app
+            key: password
+      grafana.ini:
+        server:
+          root_url: https://monitor.dev.cm/
+        public_dashboards:
+          enabled: false
+        help:
+          enabled: false
+        news:
+          news_feed_enabled: false
+        database:
+          type: postgres
+          host: cnpg17-cluster-sh-rw.infra-data:5432
+          name: grafana
+          user: app
+          password: $__env{GF_DATABASE_PASSWORD}
+      persistence:
+        type: pvc
+        enabled: true
+        accessModes:
+          - ReadWriteOnce
+        size: 10Gi
+
+    prometheus:
+      prometheusSpec:
+        storageSpec:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+                - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 30Gi
+        routePrefix: /prometheus
+        serviceMonitorSelectorNilUsesHelmValues: false
+        podMonitorSelectorNilUsesHelmValues: false
+        ruleSelectorNilUsesHelmValues: false
+        scrapeInterval: 1m
+      ingress:
+        enabled: false
+        ingressClassName: nginx
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /prometheus
+
+    alertmanager:
+      alertmanagerSpec:
+        storage:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+                - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 10Gi
+        routePrefix: /alertmanager
+      ingress:
+        enabled: false
+        ingressClassName: nginx
+        hosts:
+          - monitor.dev.cm
+        paths:
+          - /alertmanager