Kubernetes/k8s-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[hotfix] change to ArgoCD Vault Plugin (!96)

Browse Source 
Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/96
This commit is contained in:
Denis Patrakeev
2025-03-04 20:07:08 +03:00
parent 7435daba78
commit a88d65261a
2 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/prometheus/argocd-apps-prometheus-secret.yaml
View File

@@ -7,10 +7,7 @@ metadata:
name: prometheus-secret name: prometheus-secret
namespace: cloud-prod namespace: cloud-prod
annotations: annotations:
vault.security.banzaicloud.io/vault-addr: "https://vault.avroid.tech" avp.kubernetes.io/path: "team-devops/data/services/monitoring/k8s/cloud-prod/prometheus"
vault.security.banzaicloud.io/vault-role: "cloud-prod"
vault.security.banzaicloud.io/vault-skip-verify: "false"
vault.security.banzaicloud.io/vault-path: "avroid-office"
type: Opaque type: Opaque
data: stringData:
consul.secret: dmF1bHQ6dGVhbS1kZXZvcHMvZGF0YS9zZXJ2aWNlcy9tb25pdG9yaW5nL2s4cy9jbG91ZC1wcm9kL3Byb21ldGhldXMjY29uc3VsLnNlY3JldA== consul.secret: <consul.secret>

4
clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/prometheus/values-override.yaml
View File

@@ -209,7 +209,7 @@ serverFiles:
tags: [ k8s_redis_exporter ] tags: [ k8s_redis_exporter ]
services: [ monitoring_k8s_redis_exporter ] services: [ monitoring_k8s_redis_exporter ]
authorization: authorization:
credentials: ${CONSUL_SECRET} credentials: /etc/secrets/consul-secret/consul.secret
relabel_configs: relabel_configs:
- source_labels: [ __meta_consul_service_metadata_metrics_path ] - source_labels: [ __meta_consul_service_metadata_metrics_path ]
target_label: __metrics_path__ target_label: __metrics_path__
@@ -231,7 +231,7 @@ serverFiles:
tags: [ k8s_patroni_exporter ] tags: [ k8s_patroni_exporter ]
services: [ monitoring_k8s_patroni_exporter ] services: [ monitoring_k8s_patroni_exporter ]
authorization: authorization:
credentials: ${CONSUL_SECRET} credentials: /etc/secrets/consul-secret/consul.secret
relabel_configs: relabel_configs:
- source_labels: [ __meta_consul_service_metadata_metrics_path ] - source_labels: [ __meta_consul_service_metadata_metrics_path ]
target_label: __metrics_path__ target_label: __metrics_path__