cluster

commit 01410442c19a473440a7e7a2fe2c1820fc108eda
parent bc327e307b5484da66b0fb7f9a3e8b47e85f8c4b
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 18 Nov 2023 23:31:13 +0100

Add parseable to grafana

Diffstat:
M
apps/base/kube-prometheus-stack/release.yaml
 | 
15
+++++++++++++++
M
apps/base/parseable/release.yaml
 | 
15
+++++++++++++++
M
apps/production/secrets/parseable-secret.yaml
 | 
62
++++++++++++++++++++++++++++++++++++++++++++++++--------------

3 files changed, 78 insertions(+), 14 deletions(-)
diff --git a/apps/base/kube-prometheus-stack/release.yaml b/apps/base/kube-prometheus-stack/release.yaml
@@ -54,6 +54,7 @@ spec:
       plugins:
         - grafana-piechart-panel
         - grafana-worldmap-panel
+        - https://grafana.com/api/plugins/parseable-parseable-datasource/versions/1.0.2/download;parseable-parseable-datasource
       smtp:
         existingSecret: smtp-auth-secret
       extraSecretMounts:
@@ -62,6 +63,11 @@ spec:
           defaultMode: 288
           mountPath: /etc/secrets/auth_generic_oauth
           readOnly: true
+        - name: parseable-secret-mount
+          secretName: parseable-secret
+          defaultMode: 288
+          mountPath: /etc/secrets/parseable
+          readOnly: true
       defaultDashboardsTimezone: Europe/Berlin
       dashboardProviders:
         dashboardproviders.yaml:
@@ -111,6 +117,15 @@ spec:
         datasources.yaml:
           apiVersion: 1
           datasources:
+            - name: Parseable
+              type: parseable-parseable-datasource
+              url: http://parseable.parseable.svc.cluster.local
+              access: proxy
+              isDefault: false
+              basicAuth: true
+              basicAuthUser: MTRNord
+              secureJsonData:
+                  basicAuthPassword: $__file{/etc/secrets/parseable/password}
             - name: Tempo
               type: tempo
               access: proxy
diff --git a/apps/base/parseable/release.yaml b/apps/base/parseable/release.yaml
@@ -26,3 +26,18 @@ spec:
               effect: "NoSchedule"
         parseable:
             local: true
+            localModeSecret:
+                - type: env
+                  name: parseable-env-secret
+                  prefix: P_
+                  keys:
+                    - addr
+                    - username
+                    - password
+                    - send.anonymous.usage.data
+                    - staging.dir
+                    - fs.dir
+                    - oidc.client.id
+                    - oidc.client.secret
+                    - oidc.issuer
+                    - origin_uri
diff --git a/apps/production/secrets/parseable-secret.yaml b/apps/production/secrets/parseable-secret.yaml
@@ -5,13 +5,18 @@ metadata:
     namespace: parseable
 type: Opaque
 stringData:
-    addr: ENC[AES256_GCM,data:OdjnuN/h45NEn7QE,iv:Mty+u0eyUJhYGCe5uCNwO5O/2+mWUzGLgeM2KV2tcws=,tag:fbBLCfBR7tahiPF/G26aMg==,type:str]
-    staging:
-        dir: ENC[AES256_GCM,data:2maJNKAPhpuD,iv:DMW6umpw15UbMkhFy5oS+r+hBM5WjLR+iHshn0btZuA=,tag:PjdZt+dpYqY/HekiO0a15Q==,type:str]
-    fs:
-        dir: ENC[AES256_GCM,data:NYdrJDRK,iv:RkFDDBqNYqiLWmbDdEL9DAKx7+hD7BIPk9Ti/upQuWU=,tag:xC1Vfh+f3uwsRr2KtWnnRQ==,type:str]
-    username: ENC[AES256_GCM,data:9R1gifS5vA==,iv:HPqjeTERcRZWPU2mYUljSX8ZnW7xU/Rpb0EkhZF/uXk=,tag:72JdEX9dRu8G8PZ5uvRPpQ==,type:str]
-    password: ENC[AES256_GCM,data:V5QvycUe/gPC1clJicnpdvEAIBRJnEo3yuwkr3fN+eATIznSJ+iuUmQVJncNMgJJ/CWU9ju3yUg0ekEZB2F+ig==,iv:5QwXxquSbCesahY/X8frkVsaZoV3M0pdpmjWJ5UaeEE=,tag:lJ+1lYcNiEhBTwcHpvt+XQ==,type:str]
+    addr: ENC[AES256_GCM,data:oUu2vIzwvgMqAlP6,iv:Z+nDf78V9TeeAR96U6wsq+LnjFrQlgFNzu8cJnNzuG0=,tag:LpDE+1TPcbXJAcEvbvOwdQ==,type:str]
+    staging.dir: ENC[AES256_GCM,data:+pLOyMiWdd4r,iv:8pqQVVWIlF1z4oaQMVX32zMt8ZwiUSqnSjBBBQXqNMg=,tag:IeJaWJnqkKIiZAi/ksaR5g==,type:str]
+    fs.dir: ENC[AES256_GCM,data:zW9EBcP0,iv:0JlV9R04mZWd2Y1HtKcXhb/oK+omjZ3Lr6MFG6t6Vrw=,tag:YR/jXnWmWrMxkeUq7BW/sA==,type:str]
+    username: ENC[AES256_GCM,data:n+4yzql+eg==,iv:HO05cZ9XQMwI+u82xlywEeGgtpB92LmomLn4t73shPs=,tag:W8xsoFaTJe9jLsVTaF05aA==,type:str]
+    password: ENC[AES256_GCM,data:fAvVDMw5LqkE4u3fQIB+eWnzwtm1HBDWOAft7+iuNj8Df2czduQlv2oSrCMCwedHSgw9DAVKyC/7gErz8x4KtQ==,iv:ndV6SkF96F/NT62UzlSMesTZ/W+ieiQz7rgfRfs1VIw=,tag:R3rswlnOWFeYAMtPdrVlTw==,type:str]
+    oidc:
+        client:
+            id: ENC[AES256_GCM,data:dRMqfjzlXpf/,iv:vimF7p77UFxfQSHqUuNFLsTVf/PoEpbW7ozYXjHxEqI=,tag:6XK4dSUcy0a3lK2CR0SFJg==,type:str]
+            secret: ENC[AES256_GCM,data:B/l9uRpg7byLH6HJ4gUwYkFsqWIFhqdR3/ZTys7tJCM=,iv:DuufJ/r/MfgJOhnypXz6FPabJCVNbm9Lzt/BSNQGJac=,tag:iGE3iNu3dQKyPKD3zMVh0A==,type:str]
+        issuer: ENC[AES256_GCM,data:nlj1TtqsnIejcM6a+XZrzVqgsKohqHHmJvba454wybky5YovHnRvUEjC9oVF+IG7WhyX0Tk=,iv:0W/BGMiso7NdcbuxoIwRj7AmtHwpCDCE1u5b29uiKR0=,tag:zDnBZCRiRp4m8qpl7+FOtQ==,type:str]
+    origin_uri: ENC[AES256_GCM,data:UhDvS6qh47qYGAZ3ySgZzqRQnVEobyz0riW7fZHGhDocnwbKTg9BaQ==,iv:1yovktp5QaqTAmc6cCBuD+HbIQW2/9+qBGLnFHUZcC8=,tag:Cq5MPQoIuLqASNY1wYnUwg==,type:str]
+    send.anonymous.usage.data: ENC[AES256_GCM,data:ETGLapE=,iv:A7KFE9f450UxFQexVni4kkVRJ2582nlxw0doutOB8YA=,tag:s20TAEXLzgGnqDwp8w/RqQ==,type:bool]
 sops:
     kms: []
     gcp_kms: []
@@ -21,14 +26,43 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKclpzSHM5NW9XckJRV3hU
-            WDBRNTdGd1FZU3N4ZFJLaXV6WGpKOUJ6MG1VClZPQUlqSzBWRGUxUG9ZZGt0OWdG
-            UHMycDRRODUybmU5cUlISTl5YWtCSjgKLS0tIDRYM01Xa3pGOGtHVzN0ZTZmVHRD
-            aFJEOEpqRktSQitHUkl4RGg4dmswOVEK9NFkPUKfIpF9kSgLy+RTKuPgBwcR7w1H
-            PGY0fn/loCDGeLP9xab22aC4YhqBXliitcqh0Tonk9o/B8L5wljmzQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1eGl0QjlBK2I4eTRka1o4
+            UEJFUXF1U1lHREFvcnRjWHF3MzV6NjZFMEhVCm9SZTh3TTZSdkFJOEc3cTAzaFV1
+            ZVBaNk9VMjlXTlkzOEhxakZjbWh4SDQKLS0tIFlGMjFtZkswZmNseTc1Mml4Z3Nv
+            TVBCb2FSRUQxRGNEcFFkYTg4ZEtRd3cK1Hq0fs+0wJllv03E88bFfj+ClokQce06
+            jvMx+AAOgvfXrzQecpz5BnZz3CkuLiDYn1+npKoaoI6NHFzvt0A1oQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-11-18T22:07:37Z"
-    mac: ENC[AES256_GCM,data:WyPyHIyxexMTUrRi2Tz/Jda1/qMFGhqqk8Ta2gfNDIDNO9bVJ814dBcptz4ufcsXL3uYptp9lT1caLiO7UfqIQxtAGseQ+SFQKA9cNw/+e8Yf5Sy0Wl4u2yM0DOPHDMfOH5BoDuf3LmBdi1tPdTK4Vy4ciseF0eBw0Yd7YeUonc=,iv:E+O3635XAr54ikHtUzIddfTuwvOBtrqiNyv/lBMeJz4=,tag:2ZvFpRDKF5DiPGTZXxYzqw==,type:str]
+    lastmodified: "2023-11-18T22:30:43Z"
+    mac: ENC[AES256_GCM,data:ZSGvGJanfEs8KZBoGf5nZq4/+G/hmrPkfZKuiMxwz4gRsQDNcXbb9zXF+uUjHq2Z6dpIqcPrfQqHoC2gkMdrRELVf9bwYOPS+RLYMO3BzTxUyGi/5vqcGnYHNdOcEgplDvSZm6aYImLVQyTBCVI81dx+tbacU/U/YYnz6V8NK0A=,iv:iSsex8AGsZB6D2U8RRC1wMe9pEhsbdLud8jM++J63t8=,tag:yD7nMUws41xIoPb8ZAqMsg==,type:str]
+    pgp: []
+    encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: parseable-secret
+    namespace: monitoring
+type: Opaque
+stringData:
+    password: ENC[AES256_GCM,data:k/insrJWtr8AkG9OLurSuD2K8T6IwuM3fL4NEc6sh+s4m6/tp1K7PqFvWoqVfHd+xz8tMRsIRIQeAP/LzGB8Hg==,iv:XwPNoFL6aQVVwN1yRSjsFOqiY36rnx3Z6qUZz/8Szks=,tag:WOuxY7Ob3MLEP5XU6laehA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1eGl0QjlBK2I4eTRka1o4
+            UEJFUXF1U1lHREFvcnRjWHF3MzV6NjZFMEhVCm9SZTh3TTZSdkFJOEc3cTAzaFV1
+            ZVBaNk9VMjlXTlkzOEhxakZjbWh4SDQKLS0tIFlGMjFtZkswZmNseTc1Mml4Z3Nv
+            TVBCb2FSRUQxRGNEcFFkYTg4ZEtRd3cK1Hq0fs+0wJllv03E88bFfj+ClokQce06
+            jvMx+AAOgvfXrzQecpz5BnZz3CkuLiDYn1+npKoaoI6NHFzvt0A1oQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-18T22:30:43Z"
+    mac: ENC[AES256_GCM,data:ZSGvGJanfEs8KZBoGf5nZq4/+G/hmrPkfZKuiMxwz4gRsQDNcXbb9zXF+uUjHq2Z6dpIqcPrfQqHoC2gkMdrRELVf9bwYOPS+RLYMO3BzTxUyGi/5vqcGnYHNdOcEgplDvSZm6aYImLVQyTBCVI81dx+tbacU/U/YYnz6V8NK0A=,iv:iSsex8AGsZB6D2U8RRC1wMe9pEhsbdLud8jM++J63t8=,tag:yD7nMUws41xIoPb8ZAqMsg==,type:str]
     pgp: []
     encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
     version: 3.7.3