[DO-1600] Fix name files and secret postgres_exporter (!80)
[DO-1600] Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech> Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/80
This commit is contained in:
@@ -20,7 +20,7 @@ spec:
|
|||||||
targetRevision: 2.9.3
|
targetRevision: 2.9.3
|
||||||
helm:
|
helm:
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/monitoring/karma/values-ovveride.yaml
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/monitoring/karma/values-override.yaml
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true
|
prune: true
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ spec:
|
|||||||
targetRevision: 0.26.0
|
targetRevision: 0.26.0
|
||||||
helm:
|
helm:
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy-operator/values-ovveride.yaml
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy-operator/values-override.yaml
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true
|
prune: true
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ spec:
|
|||||||
targetRevision: 0.11.1
|
targetRevision: 0.11.1
|
||||||
helm:
|
helm:
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/values-ovveride.yaml
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/values-override.yaml
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true
|
prune: true
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ spec:
|
|||||||
targetRevision: 6.9.0
|
targetRevision: 6.9.0
|
||||||
helm:
|
helm:
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-ovveride.yaml
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true
|
prune: true
|
||||||
|
|||||||
@@ -21,6 +21,31 @@ serviceAccount:
|
|||||||
# If not set and create is true, a name is generated using the fullname template
|
# If not set and create is true, a name is generated using the fullname template
|
||||||
name: vault
|
name: vault
|
||||||
|
|
||||||
|
config:
|
||||||
|
## The datasource properties on config are passed through helm tpl function.
|
||||||
|
## ref: https://helm.sh/docs/developing_charts/#using-the-tpl-function
|
||||||
|
datasource:
|
||||||
|
# Specify userFile if DB username is stored in a file.
|
||||||
|
# For example, to use with vault-injector from Hashicorp
|
||||||
|
userSecret:
|
||||||
|
name: postgres-exporter-config
|
||||||
|
key: username
|
||||||
|
# Only one of password, passwordFile, passwordSecret and pgpassfile can be specified
|
||||||
|
passwordSecret:
|
||||||
|
name: postgres-exporter-config
|
||||||
|
key: password
|
||||||
|
|
||||||
|
# postgres_exporter.yml
|
||||||
|
postgresExporter:
|
||||||
|
auth_modules:
|
||||||
|
pg_monitoring:
|
||||||
|
type: userpass
|
||||||
|
userpass:
|
||||||
|
username: $DATA_SOURCE_USER
|
||||||
|
password: $DATA_SOURCE_PASS
|
||||||
|
options:
|
||||||
|
sslmode: disable
|
||||||
|
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
node-role.kubernetes.io/worker: ""
|
node-role.kubernetes.io/worker: ""
|
||||||
|
|
||||||
@@ -37,19 +62,3 @@ deployment:
|
|||||||
vault.security.banzaicloud.io/vault-role: "cloud-prod"
|
vault.security.banzaicloud.io/vault-role: "cloud-prod"
|
||||||
vault.security.banzaicloud.io/vault-skip-verify: "false"
|
vault.security.banzaicloud.io/vault-skip-verify: "false"
|
||||||
vault.security.banzaicloud.io/vault-path: "avroid-office"
|
vault.security.banzaicloud.io/vault-path: "avroid-office"
|
||||||
|
|
||||||
# Additional volumes, e. g. for secrets used in an extraContainer
|
|
||||||
extraVolumes:
|
|
||||||
- name: postgres-exporter-config
|
|
||||||
secret:
|
|
||||||
defaultMode: 420
|
|
||||||
items:
|
|
||||||
- key: postgres_exporter.yml
|
|
||||||
path: postgres_exporter.yml
|
|
||||||
secretName: postgres-exporter-secret
|
|
||||||
|
|
||||||
# Additional volume mounts
|
|
||||||
extraVolumeMounts:
|
|
||||||
- name: postgres-exporter-config
|
|
||||||
mountPath: /etc/postgres_exporter.yml
|
|
||||||
subPath: postgres_exporter.yml
|
|
||||||
@@ -20,7 +20,7 @@ spec:
|
|||||||
targetRevision: 6.9.0
|
targetRevision: 6.9.0
|
||||||
helm:
|
helm:
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-ovveride.yaml
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/redis-exporter/values-override.yaml
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true
|
prune: true
|
||||||
|
|||||||
Reference in New Issue
Block a user