cluster

commit 3294bcc554c6142d1e7a59ad658dcf42b6cdae43
parent 7b6a8b90532b39574f017952cf976358090573fd
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  6 Jun 2023 19:09:44 +0200

Setup grafana smtp

Diffstat:
M
apps/base/kube-prometheus-stack/release.yaml
 | 
6
++++++
M
apps/production/secrets/grafana-secret.yaml
 | 
50
++++++++++++++++++++++++++++++++++++++++----------

2 files changed, 46 insertions(+), 10 deletions(-)
diff --git a/apps/base/kube-prometheus-stack/release.yaml b/apps/base/kube-prometheus-stack/release.yaml
@@ -22,6 +22,8 @@ spec:
     force: true
   # https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml
   values:
+    smtp:
+      existingSecret: "smtp-auth-secret"
     prometheus:
       prometheusSpec:
         podMonitorSelectorNilUsesHelmValues: false
@@ -108,6 +110,10 @@ spec:
           matrix-media-repo-dashboard:
             url: https://git.nordgedanken.dev/kubernetes/grafana/raw/branch/main/matrix-media-repo.json
       grafana.ini:
+        smtp:
+          enabled: true
+          host: mail.nordgedanken.dev:465
+          from_address: ops@nordgedanken.dev
         paths:
           data: /var/lib/grafana/
           logs: /var/log/grafana
diff --git a/apps/production/secrets/grafana-secret.yaml b/apps/production/secrets/grafana-secret.yaml
@@ -5,8 +5,8 @@ metadata:
     namespace: monitoring
 type: Opaque
 stringData:
-    client_id: ENC[AES256_GCM,data:ptGqfVrSdw==,iv:LhTxhWGggrMdVaxku5+JqBH5NnATetCtZPU0DhBIgbE=,tag:GO1NxzOoSGnZnhINLaawcA==,type:str]
-    client_secret: ENC[AES256_GCM,data:ZzYvsyeHOwyU5pmv2c03QSRyd4GixrGfTpC5VogoiRk=,iv:djpOVHdkZAUQeRYbxu1iBMKs0OuxYJNX4zW+2uW5GY0=,tag:mTbmARyi7gWsvdSzae7ZYg==,type:str]
+    client_id: ENC[AES256_GCM,data:iKC6yE8wOw==,iv:77/qA953ezz8AYTXCxELzCdjc2OW5WcynrEh3PP09r0=,tag:v+qFMjceEcwpP2BCBr2czg==,type:str]
+    client_secret: ENC[AES256_GCM,data:lIwgmTNmjWua8tvURpmMrV04dBr28A/iNvpj76DFvFw=,iv:JXH0pZcc8OUKhEMZQ+NbUKe+yEMUXZEx4qTL0UXzWZk=,tag:GuZLyakL5nsFgke70IeX/g==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,14 +16,44 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidVo0SEYxQ0hCRjdSOS8w
-            c3NIUHVXbHl3UnVwMTVtTGd5RDhNVXlKTnhVCmY0UENIWm1QYy9NU2hlUEFMWE9D
-            REljNjNQSWpTdTJtK1RFbWg1eE5NNzQKLS0tIG5HcGtsNnNVUHVudU10UEhEdEpB
-            NDFWZzVVN0hYdnI3Y2Vwbkxqa3NCSDQKZt31e4QDBerL7BpWsqijJiUlZrw6qPip
-            CLO+7xTjrhj95PvJoa+5nES7Sv4tzseAHZ2SNEcusd1Ok9cS6VIMVQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydWhRN1dZRCtxdGI5Rm13
+            RWFvbm5sZWxFbDJGQW1hUG1IZ2hEQjAxUHpBCi9Xem1VdHhMSjNhU3V6OXZ0Y1pV
+            c2Y2elREZ2N1aTczd1ByaEp3RlNqVEUKLS0tIExCenFpVXpYVlV6bHZwQVFPVWFH
+            bEc3VnYxbXhLMjF3YmdzUDA5bUNpRnMKLrTJ2mODzlQFerElnEm4z5lYnCbN623E
+            drX6ZXsg0xNeAw24nOeY6SDx1MGchq65m0XoJ1GJTSTlhfEa9SPv8g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-03-19T18:24:16Z"
-    mac: ENC[AES256_GCM,data:lZLvXEcLJd5KUEKK++0mnpsaHC03qM865nwoxurnlz1VAy/DBUdjmGAcdjrX8c+6mF4yPlLyLkBfSYLwRo7sfIuaFl0lkGdf1voVaIsm66VVpzMaz8VUW3aC/j1ZW6Vz4OCSFYH7kWzNcq+gjL0OrBLKM4iVCa6oMBrFJq/NCYo=,iv:/HVdpPN3bAoqi+SLLwidBHZB7sIKcrbCCWqMQAoGXo4=,tag:2KbH7G5g/LFbDTgF3rqiFQ==,type:str]
+    lastmodified: "2023-06-06T17:08:07Z"
+    mac: ENC[AES256_GCM,data:CI0Fn0N9dj8fM+qltR0T4cMqz20aBSl+edMMmhvh8yJTDZJ/0Vo2UCVt8zG42G9gYRZxHXKMyr5JSV0u5yaE/RwccrMBf1AXmrYHvm6pPKTcCB/PusPb5B5UtU8JiBg6CKAYptPiK/iXzT2nAUXJ1tAEpnQTTBjtk2lL0WjND0s=,iv:AUwqjcVRFzDa3tftyQuSyah0W4+XZNbUU4u3QP9vejQ=,tag:ol8B49nvdjuieyYUFDgkrw==,type:str]
     pgp: []
-    encrypted_regex: ^(data|stringData)$
+    encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: smtp-auth-secret
+    namespace: monitoring
+type: Opaque
+stringData:
+    user: ENC[AES256_GCM,data:59bA1loGwrs2oOaFmMjVMDY/FzY=,iv:VJa/eeZ7IiqkNffZIlbeiTqo6DDLo4jelD73ZgrF5k8=,tag:AZS4JlKYtSZzi0P0Mq44xg==,type:str]
+    password: ENC[AES256_GCM,data:y/K1BOJ0zOVu,iv:c52BrD+A98BXOPbKx+30IX9K4uLcwUra26PH4gT4Cb4=,tag:OhenDFxCiv0bCArm22dRiA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydWhRN1dZRCtxdGI5Rm13
+            RWFvbm5sZWxFbDJGQW1hUG1IZ2hEQjAxUHpBCi9Xem1VdHhMSjNhU3V6OXZ0Y1pV
+            c2Y2elREZ2N1aTczd1ByaEp3RlNqVEUKLS0tIExCenFpVXpYVlV6bHZwQVFPVWFH
+            bEc3VnYxbXhLMjF3YmdzUDA5bUNpRnMKLrTJ2mODzlQFerElnEm4z5lYnCbN623E
+            drX6ZXsg0xNeAw24nOeY6SDx1MGchq65m0XoJ1GJTSTlhfEa9SPv8g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-06-06T17:08:07Z"
+    mac: ENC[AES256_GCM,data:CI0Fn0N9dj8fM+qltR0T4cMqz20aBSl+edMMmhvh8yJTDZJ/0Vo2UCVt8zG42G9gYRZxHXKMyr5JSV0u5yaE/RwccrMBf1AXmrYHvm6pPKTcCB/PusPb5B5UtU8JiBg6CKAYptPiK/iXzT2nAUXJ1tAEpnQTTBjtk2lL0WjND0s=,iv:AUwqjcVRFzDa3tftyQuSyah0W4+XZNbUU4u3QP9vejQ=,tag:ol8B49nvdjuieyYUFDgkrw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData|password|registration_shared_secret|shared_secret)$
     version: 3.7.3