cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 5ab7b6ad430e3ad4dd078033ed2566f2ccffbcde
parent f5cea40d096c10c20c7e2ea704b66e4a0b10d667
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat,  7 Mar 2026 09:22:56 +0100

meow

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Mapps/talos_cluster/monitoring-stack/prometheus-release.yaml | 114++++++++++++++++++++++++++++++++++++++++----------------------------------------
Minfrastructure_talos/configs/velero-alerts.yaml | 6+++---
2 files changed, 60 insertions(+), 60 deletions(-)

diff --git a/apps/talos_cluster/monitoring-stack/prometheus-release.yaml b/apps/talos_cluster/monitoring-stack/prometheus-release.yaml @@ -69,15 +69,15 @@ spec: - name: "null" - name: pagerduty-critical pagerduty_configs: - - routing_key: ENC[AES256_GCM,data:07jR+/gi3sWIvg+AyMPBkwF0l7+CDdEX0ETNzrf+wS4=,iv:UWz/VSKx6EinkADTPnYSjBZqR89ljBscn2Q2FqrlJNw=,tag:Qeg9OLqltZzsemCnUJoFCQ==,type:str] + - routing_key: ENC[AES256_GCM,data:yaGdLAiTSG/BSg5CPV1FMlaQV+DO73YAXq/V9ew6jxc=,iv:GPz6iCmwFYsk1+6Y2S7g6OwgfIqHxR65TAWdfX+4/wE=,tag:NRP8q0fATdzC/eUtpGSXWQ==,type:str] severity: critical - name: pagerduty-warning pagerduty_configs: - - routing_key: ENC[AES256_GCM,data:3e+QthbhOAYMRku6RuKmHEgw2pgGpvpKnJhVJj5FWjI=,iv:uKbXI3mGuXlD7YeijQBtUJnHq0Gb4uL1kRxiwUDFzr4=,tag:eJwxDPxAAx1U1uM7sQeudA==,type:str] + - routing_key: ENC[AES256_GCM,data:Dq4GeVjPI8tWt+yfZvP6JwgOx9GjB7tpvZvRReFUdag=,iv:yS5wKPTGtPiD9/G6yI5rNY+uljAUh/mB/ePEkTAbjeM=,tag:rIueFbelOAAmOUjC0+MdmQ==,type:str] severity: warning - name: pagerduty-draupnir4all pagerduty_configs: - - routing_key: ENC[AES256_GCM,data:I+BVM7MQpVfw2eIfifozqsxBPZHgxVfdvxeMFRgvsXQ=,iv:zerD46B5fUDx3KHw5QZeHdTBwlLdzauHVHohK+F51WU=,tag:iIOf1ID4uN9bDOrJdYQfIg==,type:str] + - routing_key: ENC[AES256_GCM,data:LXl707QxKiCtsJYUiO/rWkJZyrRhzn4Th+NxO2xf6zU=,iv:yOkxC4sGORco2FRd5QcWwVDrlkR+7m+a2KOiNyPfFKw=,tag:GSAhPoM6PYsDDHR/Ib5ikw==,type:str] severity: critical inhibit_rules: - source_matchers: @@ -115,7 +115,7 @@ spec: objectStorageConfig: existingSecret: name: thanos-objstore-secret - key: ENC[AES256_GCM,data:vgRaXCdm,iv:FUhHSUCg+wVtpFyhZDzOwd8YQxpVOlXhYAh+Y2m8y50=,tag:VhjFXeDTx9dsR6ZUvF7miQ==,type:str] + key: ENC[AES256_GCM,data:G79TGxNq,iv:HGsxNiyVmhHUYgIxFsjfDgcqMGJKEqY05amE0cTihR0=,tag:AHn1PUea7+byTYWPFuYRmw==,type:str] storageSpec: volumeClaimTemplate: spec: @@ -126,7 +126,7 @@ spec: requests: storage: 10Gi grafana: - adminPassword: ENC[AES256_GCM,data:8v25glvA2vytL2cdrgIvqtGt6mXbe14JuRfFApAqMCGj32yHaRIzBp8TtvEt+C/uifpvQmM7Oi1oKgilNbkrBg==,iv:JhNyq25GPolP0CBeZhiWSRfUZIVTRaZNNA5TX5Eu6pA=,tag:4wLFXoQSabw3lNTSaISxAA==,type:str] + adminPassword: ENC[AES256_GCM,data:lGxZ4e+R2exsYiDzSIdmZIgujHoVH9b2SIECAwVYLdPAzoo3x0TiUvJQL23/90dSIrBfWBKsUTORVEGOeLs2eQ==,iv:0LPkUW4hqFNx2wEv+Mj/nEEc6TMsZfGlmmBhxIq4/Io=,tag:5gnpZtOz+TfJF+umSRQiaw==,type:str] sidecar: datasources: # Disable the auto-generated default Prometheus datasource so it @@ -186,7 +186,7 @@ spec: database: draupnir_synapse user: grafana-ro secureJsonData: - password: ENC[AES256_GCM,data:zZVrCsQ4Eb7Dn6PQsW+7/r6bnROubCgC/dJB5QLfgvTzPlOQPoE258PT7YkSc+GnXy3Msds4yRVbtFuKMyjFgA==,iv:P77w0gssu08h+G9gBiBPQ4yNnMPuFFTnXKgUzGwmNtA=,tag:U5ccE0zFhhiOLSjisybDmQ==,type:str] + password: ENC[AES256_GCM,data:BFYJqYhZMNnuFyA+NHsIypFdgult35TWQWFZWhGjA2ZNC3toS8qT4CuEGJk+OOSr1Swe6AoKfOPTS3MmJ0hBPQ==,iv:21X7hWWKDyMFJI4ZYNxO7dl/uKsnEedy7LkNy5KsyX4=,tag:G0oK+fEwAxnrH5Bb2+AoLw==,type:str] isDefault: false jsonData: sslmode: disable @@ -210,7 +210,7 @@ spec: database: connectivity-tester user: connectivity-tester secureJsonData: - password: ENC[AES256_GCM,data:Yd/WbLjFF+EX3RgClqJjGREn2KyrNgwKc0E3MZA8j32VO4yYtnaPsF0wlaYt/p2ILf6dFS+JsZ7/g4gCxknn+Q==,iv:0hi9+kQ9MjtW36VFuSNX907MbLvna/o+lswKAnp+/pY=,tag:F6lcp2x95opmjlNMQIaQ5Q==,type:str] + password: ENC[AES256_GCM,data:Rd7DFPBBlu8ejbFZrAPEZLg4Iwsq/VgtOA8qKst3hkLrx/8EHqQ7nh48xGo9IsT2SEF5soo/B4bsfrshOTBuXA==,iv:5xiRAQeLizknUUGyoAnkG4MPPtHQ/TNUFu6UyGaLUa0=,tag:/lNdWXrUHFpBIeZfVrjBcg==,type:str] isDefault: false jsonData: sslmode: disable @@ -228,7 +228,7 @@ spec: host: smtp.fastmail.com:465 from_address: ops@nordgedanken.dev paths: - data: ENC[AES256_GCM,data:fO1fQ8ZEhGyRp1KLnotJD1A=,iv:rE8fIE7l3TiFhbMJ3eUfDK3+wIy2IKRs1icedQu+1/Q=,tag:KCYkduD7vJX+WfGfhjZ3iA==,type:str] + data: ENC[AES256_GCM,data:qel5EIs4wT8jikQeKZDV10c=,iv:GofaZfhThbfTgKS6m6uaOmGUBaCdMzbVVZ312BSskIU=,tag:ZCl4JwpUGkppxurTphtbeQ==,type:str] logs: /var/log/grafana plugins: /var/lib/grafana/plugins provisioning: /etc/grafana/provisioning @@ -244,8 +244,8 @@ spec: auth.generic_oauth: name: authentik enabled: true - client_id: ENC[AES256_GCM,data:j3MiDaW//3/OsjinxF54Uq+wtGdCtIlyOvLwENniiY+NYn/qjPgwJWVx2oWsFi1ZsLE=,iv:dRONtblWGIsLfM6W6mWeYMnobtNzZLOJfjdgWGA7BKU=,tag:RmU1bwIrHc5nfNuSlnduzw==,type:str] - client_secret: ENC[AES256_GCM,data:wZ/HQFEHm9Aq45jJUKgmn4L6Zo/J7qOv9/sIiOxioa3cgN4hNz2MPQJERcpCqvPcEQwZsI/Q,iv:Yr/jmkvCbdQDw5NSk0JmLyYlAc+6ItlGaHfOksTBANE=,tag:5UlMt+ybsq2J3kgyWgS/Ug==,type:str] + client_id: ENC[AES256_GCM,data:wQPuBkgZkaP4xpIp49//JFuOtcnxXiS45HZqYoO/O3gdm//JKE6dUL5Xr4CC0hWnf74=,iv:sJONQxyHX24kAUFf0VBNvaN9bUKYcmjjQIoS13Nk2IU=,tag:8H1znDoR6jSvXte/ym79YA==,type:str] + client_secret: ENC[AES256_GCM,data:aactgxIi9Hau1vZASPvAVmTdHgf8yj3ezkMcrh5SOyvHsZltWIT5+hs/sg8mbAPQ+LPqRD5h,iv:V1XUoNMDj9s0EGu/ecBt6MCT2ykLc+RM1V5rGhGCxOs=,tag:tRGiD1SS5sa0Ct86x/Vs1w==,type:str] scopes: openid email profile auth_url: https://auth.midnightthoughts.space/application/o/authorize/ token_url: https://auth.midnightthoughts.space/application/o/token/ @@ -266,48 +266,48 @@ spec: title: CertManagerHittingRateLimits condition: B data: - - refId: ENC[AES256_GCM,data:pQ==,iv:E2vCPvql4oHgelB87gCOJeRromtFXxEP5eJ4XaRFtxU=,tag:ljUw37IB1UL1ZT8lGOkdEw==,type:str] + - refId: ENC[AES256_GCM,data:Hw==,iv:0HyoU8f4ODcX9kol5QgWwB1SV1l78HTPfzOmdYxXNho=,tag:BP9o0aoLtCfG4cVyILMN+Q==,type:str] relativeTimeRange: - from: ENC[AES256_GCM,data:rQvN,iv:zjm1lSoHNLLcRN4QGNmI/7gi6SBkRBE0fIEv89XQfgo=,tag:dgYfciULhKjZPN8RVsf3Mw==,type:int] - to: ENC[AES256_GCM,data:Zw==,iv:bPhNnrS5FP2UGObrFBH746FIiLhr4IKXHcSs2UyNJIs=,tag:FfkupntHgzQBtOFdM1zVrQ==,type:int] - datasourceUid: ENC[AES256_GCM,data:tOmi75bWFsdyeA==,iv:qdac7I04L1PL4ZXzGC+gzjeSqb7emCTmzVG5/rVmkEo=,tag:VXW18Fwd/dyPuSnPKv+F2A==,type:str] + from: ENC[AES256_GCM,data:cKEp,iv:f8U4CRaq1ynmiPTmdF5+z40LTvu+6ZsVZD7sRSehcXg=,tag:R+s853nn2zd0/yatdwketg==,type:int] + to: ENC[AES256_GCM,data:Xw==,iv:X4CRmmlyV5gTiirSXFXqokriAPdORGcv/T5R0HNB80I=,tag:OoTSW7qWcTiLaUQrT/gIgA==,type:int] + datasourceUid: ENC[AES256_GCM,data:/viItEFRK+OokQ==,iv:W4ntm7AWNhf2hcLH9Ad97ABHLeE89uCnYdsH/tgk/Yw=,tag:hw8fzPN7EKKY4+FPdBs2Sw==,type:str] model: - editorMode: ENC[AES256_GCM,data:WlqxUg==,iv:JDdjHia5Io6sfFTaqb1MniEzEX6rF3X/snGWwizFGkM=,tag:uYVsJ67CIeX1tJCKGgVNRg==,type:str] - expr: ENC[AES256_GCM,data:6el17tDyWJH1YCn4+2Adj4KXx++N9K7ZEHbAiDuxTwW0g+TKUwe4eltVQ1UvfH2fiKU/jgf7RoO9IsDDxyrHohLY2jjfJQ4izJF5LU1lcB8C1SHNbb/bVocXZnWUboDAicgp378KComDV0VayyQSLHXo,iv:4wyysQSYACL8YLyjzW1MOtkx4VwuFkvkM+R31d9wwiw=,tag:PWZebixjRXavi6u2JPLCag==,type:str] - instant: ENC[AES256_GCM,data:0n6GCg==,iv:YW0dCsU1tvdxu8maoo/Mn82BOjZQXXHf+nTuHTtikKg=,tag:G8f+9oz4Nn2gd8iPMAo/Vw==,type:bool] - intervalMs: ENC[AES256_GCM,data:Ajfuyw==,iv:Fakv5gReJrtpYbG7rvPokTbt5xcMIu4Ke5paxsM+nEk=,tag:cSW4j/ws8Jc7bt0DcYfA0w==,type:int] - legendFormat: ENC[AES256_GCM,data:oiwLCmvm,iv:zWaKVVGtqGRCD/8IoVkqmf2nq4dW4QuFy4Bz0G4U1cg=,tag:ujU+Cb3Em/GPTAckKyGK7g==,type:str] - maxDataPoints: ENC[AES256_GCM,data:ZZA3UvA=,iv:nMuHydVieHidTkkso2vbIGtLbUUpWQZzLJ1BVH5i6So=,tag:wro0efXF5cypO0WUT0XN2A==,type:int] - range: ENC[AES256_GCM,data:Sh1tfGU=,iv:SuOGx5uTXy9tBFq0yqV/fevrgcs9ICe1u7fbKmUtmF0=,tag:dPaEOd2Ckmy1tHZ5Y/TeAQ==,type:bool] - refId: ENC[AES256_GCM,data:zA==,iv:9yhYq0BZQthBEn+73gKGMYxgFHtOEwATS4bnhGH0wp8=,tag:xTY3wL1/HfPrh0XOIR/rIQ==,type:str] - - refId: ENC[AES256_GCM,data:mQ==,iv:TDd20f5BszAvqJt5HLOTgb5GAdsMtQsfi8fRV5bSkwc=,tag:u1DeX5GVzfewgeEsOgM3EQ==,type:str] + editorMode: ENC[AES256_GCM,data:V13+KA==,iv:1ChiFYMoXX2OOGJRp6cpfXP/2KF7PqRytHXrP6OW4Hc=,tag:gVA4I5yKkOjtUSwoMRUXfg==,type:str] + expr: ENC[AES256_GCM,data:RVqsXssSeNC/qYT2kxdw18lECfYrA611JO7NkUDYQWyX+XCv6RwSXW+tOxrjYTC5Zt8I1IkhypSItTqdDZG+pxY/jmQFt6WhwbvdCmp75RnNA7RukrUPRt0o7NtwjJqIOZRKMZvwFaISv5Qv47aR0yXk,iv:1Bu/8C4gR4xnkRMgogW7D22TGiRbokNDxa3i20TcGT4=,tag:NjP7QKMfyCKWWubHJiHrJQ==,type:str] + instant: ENC[AES256_GCM,data:0ki1CQ==,iv:ZdoVHtUAW+vd/AF4/T2sknd1gSIxlzOAV8sgYP5jTQk=,tag:SSU6g7wkvNB2C15QS3SgOg==,type:bool] + intervalMs: ENC[AES256_GCM,data:p2wE6Q==,iv:FKKY08HEmGcrzXubkZmDf4N4fD9sVV4uzXBxpiCOzV4=,tag:QHa6/mXPxRrjBGXQv4oFSg==,type:int] + legendFormat: ENC[AES256_GCM,data:M1T+B5n6,iv:WuMZhfWxsPrXTVY8++XotrK4G5Axsksms7+cyxpNam8=,tag:OmvpcRMBCXmn63gmivZVYg==,type:str] + maxDataPoints: ENC[AES256_GCM,data:vnahLUI=,iv:HLMeb8vU7xFGFRQpdJaE1JIEsaBAiKXoLf1iRgsd8xA=,tag:IRm2NOdKRa98ifoCDakRag==,type:int] + range: ENC[AES256_GCM,data:I/ezHbE=,iv:af5VmTLpuCjEDEKCrQ+teinxyInN2ej64+o14D+a/Xo=,tag:jhcuV7zUrx6yvraQTOnFhA==,type:bool] + refId: ENC[AES256_GCM,data:ow==,iv:s61hWxNGjZqDDpTePwkx+itfTLxZ9hm21+MswuhdCto=,tag:V4mUtcG6KMgNY+FvgSFh5A==,type:str] + - refId: ENC[AES256_GCM,data:uQ==,iv:83d24qp54dgKbCzMIHFGyvwyokNiAdBZWLhggMfgNfQ=,tag:4gEtoQ722ODJQS1X8BBnag==,type:str] relativeTimeRange: - from: ENC[AES256_GCM,data:FONU,iv:W8fZYVmLOkK+fVko9RSEo7fyJHYyAsYp5cpBUfc8VrY=,tag:j8DPghCObiK6PLX3xYJ1eg==,type:int] - to: ENC[AES256_GCM,data:Aw==,iv:UxBuyqFAMGdMBso8fxvWP/q+iwm31w/lDdegVJnjt54=,tag:41DrQ8Tw+Z/TXZ7VEvzVQw==,type:int] - datasourceUid: ENC[AES256_GCM,data:qoAf2gs0zBI=,iv:wiHIXwKCWHtQmFW+0z+SFQD75oLKXGR2sAOwpPHN2Vk=,tag:T9giBOrJmSnixXjhMq/Q9A==,type:str] + from: ENC[AES256_GCM,data:lOn8,iv:k4k0loVUxK/HKMVBkl9GjV6rS9uSVt2J92DUPocv/Ic=,tag:GBkSzkxGvwvVz9ZzHRcT7A==,type:int] + to: ENC[AES256_GCM,data:sg==,iv:0VRNFkOauHB/TKkanYFb7YWXDchcVxhkxoU8ycU2594=,tag:WJoBB4hf5wCL1x3W0ZNGHQ==,type:int] + datasourceUid: ENC[AES256_GCM,data:paHFJVOnCYU=,iv:7V5yKcmCxNzUWOgtvhCH+Gh8XwDrU3rB5Yz/dE1XNkE=,tag:wrIO0pM1pWeKayMutKYxgw==,type:str] model: conditions: - evaluator: params: [] - type: ENC[AES256_GCM,data:TmI=,iv:o/Zp1DSjRHx34HTBlCKkUSsEAv0cS3b+4cbxV8LSWQg=,tag:ShLi53GJcVlM2dMmtwS8RQ==,type:str] + type: ENC[AES256_GCM,data:Qe8=,iv:6tsELYSPLBiZhHS3o+VJjwKB3v1kkVPRHGP6fk2b82k=,tag:Wg8DSVtDP+ANH7wnw2HBZw==,type:str] operator: - type: ENC[AES256_GCM,data:6Ba+,iv:EmhAcmsV+yYC00IBxBlTCVP2gS3K0RkYp8dOUulOtoI=,tag:RpMC8fndH69rs/mucckjxw==,type:str] + type: ENC[AES256_GCM,data:RMax,iv:uLE57sJEuSroiLR4WfRwSaqak38aqY32pCFZdBRjYP4=,tag:8EWvDqjwHMx0uzJ1LncGHQ==,type:str] query: params: - - ENC[AES256_GCM,data:aQ==,iv:TWqfbcr5YnzjD2ZLVonJWIViEx2Q96Ng3BPuYbgLXBQ=,tag:mL0FGmwOgfFpqVFseGNm9Q==,type:str] + - ENC[AES256_GCM,data:gA==,iv:SZ8wR6rF/NI6aJ+KqvgUczrmJ++sEdykL7sJqtDuJqY=,tag:FXW0uTV65AMhjlimdaxEBg==,type:str] reducer: params: [] - type: ENC[AES256_GCM,data:oe6BYg==,iv:L2zrj5cSfcQEDWpq7tFMXfNU5gsrJfOsvUYcaJqkv2w=,tag:Zyx3NBIXvlVCQ+a7lEVpkQ==,type:str] - type: ENC[AES256_GCM,data:fDvczTw=,iv:xCCkctj37+O3yTUbKsAKZqPZUSOrLcH5nRVHrv+Pc+o=,tag:zy+Vc8gndJ58APXKeP6IOg==,type:str] + type: ENC[AES256_GCM,data:IYZO1Q==,iv:TsWbUMWUouJLgmC9dCC/keCLu1ek+7k/JJxebqRdS1s=,tag:TxPH1XkxGnHgKqvw6Ii4bQ==,type:str] + type: ENC[AES256_GCM,data:jPIscHc=,iv:kWhpjnki93mzgbyBMtx2ebj2QjJsKq2i4vA4JRDM1pY=,tag:ikx5C97UJIJJJ+4GJuQlaQ==,type:str] datasource: - type: ENC[AES256_GCM,data:acE1ccZV/t0=,iv:8kF9sXpSqvu7mCAqDWhcysaIISFub0Nz1vDkqrUTDc8=,tag:2nIjFHYuEZIboOJua/hj6w==,type:str] - uid: ENC[AES256_GCM,data:GVSgWJoCaZU=,iv:42R0DvEkLx6qARPquq/eLH9f84PcBby9mGgnZPbX1Wo=,tag:ZtKtswWiGlxEYtAo4J7Wiw==,type:str] - expression: ENC[AES256_GCM,data:3A==,iv:XfFP3Z/2FXZj7IW7/JXUnIV2dXrUdtOEovRl/8gcEM0=,tag:WlvUTBHruiXrkCMDe+r1+g==,type:str] - intervalMs: ENC[AES256_GCM,data:bTo/7w==,iv:tcFglbftml2qLYdTZwlOlP1Zn6dHmIt6p+ZEWBPluQU=,tag:LWzBRMywQx3cyVfhYZwInw==,type:int] - maxDataPoints: ENC[AES256_GCM,data:7//htl8=,iv:lqwooqumwXf1Ci11+c5plKzO32uHf64hXjEbM1AdYnU=,tag:zfwFdFsWhtJ3NbAV3akTFA==,type:int] - reducer: ENC[AES256_GCM,data:mpFPgg==,iv:E9GScXyORV+T/DthT0wbpc3xYtrId9fNMasJDAnIpOI=,tag:WYs/B35ImnqA81FH4TjzyQ==,type:str] - refId: ENC[AES256_GCM,data:4Q==,iv:JzmCqQ/9w5vQdQgE71Qf3ylmaV5U8uLV4uHfttXEeOQ=,tag:M9Bk2SDuoQvphk5Z9XmIpA==,type:str] - type: ENC[AES256_GCM,data:ezkKJcgf,iv:f81ukOvcPdJOnZVYe/kSTZkwKkIPXyzImaQuSeupnEw=,tag:MW8xiXnWgdpMtDGVY4b7hg==,type:str] + type: ENC[AES256_GCM,data:G2VlNRMoAyE=,iv:/lBkkq+3JpXUPhvF46uklAeyUiJ7SkNnIu/CEefNBW0=,tag:UbzU3ylSQ8YrrSEP9jNkqg==,type:str] + uid: ENC[AES256_GCM,data:Hoay8b4fQko=,iv:CQywQpu2b0AixkBDxfHIPhVSVoCYXs+1t4peH9CmOI8=,tag:UZqDJOIIOMwnBg46uOMppw==,type:str] + expression: ENC[AES256_GCM,data:bQ==,iv:pYSPep56OrFGMklxHWP0qDuRD2aXKVDih8L6lSnq/nA=,tag:nl/pqo3p0yP/VBi63qGE7g==,type:str] + intervalMs: ENC[AES256_GCM,data:IK5wNg==,iv:AKQrfJdGqYWuTsNW8hPlQl/YbE8WAmPXjO06gLEGkzY=,tag:DOwfwT05Res+WBf2+wj1Gg==,type:int] + maxDataPoints: ENC[AES256_GCM,data:9FxNd4A=,iv:mGO2mSzrWtT++nhVEgTMmBpC2K8KUZ+ktOWc+PJKb5Y=,tag:z4/d8l75tcctLeqEO2Wa5g==,type:int] + reducer: ENC[AES256_GCM,data:gIHOow==,iv:jUUcvRIl0EQAq4l48ne3x6GwNGoxoSdsYjI2gbjvcso=,tag:i/2w8U2tPp7NlC1JsfpnOw==,type:str] + refId: ENC[AES256_GCM,data:vg==,iv:D0sNVoSqiNLQXlOdV77MPMPQ1xAycsThkN87BRq5+vA=,tag:sw4zdP5YL15MdUgPBNgN0g==,type:str] + type: ENC[AES256_GCM,data:WEORrgvf,iv:enVodUxjjOUyH4Y3EeGjsahdONeE0TerNbi490fyFQc=,tag:sabNRHSlkBaCQQS4uAu+wQ==,type:str] noDataState: OK execErrState: Error for: 5m @@ -337,7 +337,7 @@ spec: - uid: adz30e8814wshd type: pagerduty settings: - integrationKey: ENC[AES256_GCM,data:R4KTJtaBEhU69baMVt3xOqE6Xg1ZpZoQM6HVETInf+M=,iv:WinWR84FCeWi9mB6vsEARXC3e1rtrPv/VEJLDKTS/5M=,tag:rtSy8gL5EiTLitb3gTWNwQ==,type:str] + integrationKey: ENC[AES256_GCM,data:AhP/oLrCLT6vhjqIRWmFWxF9NZCJEcmiulPtj0ZK2Cc=,iv:cV+BMqpVMbxlmddfq55By2orS5m1LIlXLnyj5ni5q5I=,tag:1nxu3oSzHfKV8ACJWzNZNg==,type:str] url: https://events.eu.pagerduty.com/v2/enqueue disableResolveMessage: false - orgId: 1 @@ -346,7 +346,7 @@ spec: - uid: pg_warning type: pagerduty settings: - integrationKey: ENC[AES256_GCM,data:cPHExFMm0LoT24E8/BOWAScsnKgOeO0ApSRW8VjD4zk=,iv:foX8gTQmn/xP8KOI5mFJjmy/A1yofD9dVKCQIVd3Mwg=,tag:nRZkVwQRQpwgtwcrHaAT6g==,type:str] + integrationKey: ENC[AES256_GCM,data:UrlLd2g49q7dnEDp44NO/nIGLJN8go0F0ERFDZfWtg0=,iv:Kz8ZgfmCw7Wb1KYRiF/uHQrVlisTYpHsB5D8L8YmCSY=,tag:GYzwHrLAJk/+HJfsym75UA==,type:str] severity: warning url: https://events.eu.pagerduty.com/v2/enqueue disableResolveMessage: false @@ -356,7 +356,7 @@ spec: - uid: "3" type: pagerduty settings: - integrationKey: ENC[AES256_GCM,data:Q8eqJNfurIzfLTjRJFMhebIUzGlb/frT0o6wwzyhqaM=,iv:EHO8fldMzHhDfdAY2LUYSmii6GLfFuC3uvsrMmIvLZQ=,tag:cCu1p+n9gffLOqlX3gY1xw==,type:str] + integrationKey: ENC[AES256_GCM,data:eJnfv4cO/BtTyeAaOM6KPAyHxxb1gL8N81rYuBwibyg=,iv:6VfiZWQ0qpv7hfhtXpmjE4oBEktg4tbz+F+43S3OdxE=,tag:NC8hOjEsNKCdVRgWotuJsw==,type:str] url: https://events.eu.pagerduty.com/v2/enqueue disableResolveMessage: false - orgId: 1 @@ -365,7 +365,7 @@ spec: - uid: de02at943dxxcf type: pagerduty settings: - integrationKey: ENC[AES256_GCM,data:5xqskxjoB3PdpASZOa9yDYUQLG0UJZLwgAMm+Jrg7bQ=,iv:d9uRmCUrFoMN8IeIGTAqF7XyXv34SQSGnP68unODsWk=,tag:KcCwBPdHzLJAIx5MqSn/xg==,type:str] + integrationKey: ENC[AES256_GCM,data:mygTyoYvbyup2pFbRrC/QjYbRDBrOPHZoL2FFv6yqiQ=,iv:7bqlohhwfj/w4HMNwoB7DdgAu8QXbJklNVaVgx4LCUw=,tag:EiReVvzzQTCvRkbVxE1bGw==,type:str] severity: warning url: https://events.eu.pagerduty.com/v2/enqueue disableResolveMessage: false @@ -416,14 +416,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cGdPVXVtL1VmelZreERF - RXhhTGlYYmthbDlSajdrVFhVdTRlcHBsaUdZCmxqRG43NERHdjE1RmlnR3BBVnl6 - dGxYVFpPK0ZIVDRNOWN1NVBXY2F3M0kKLS0tIEhpYjZpeUt0SjUybWpXWjJVM3J3 - SGxwVmlxVmFEVC9xOEl0dmVqeUZOZEEK/lbgKCTx3z/4fsyGuExd/h6yRciBWRcK - ZwPnzGinwVdJMyxEJc0LXxtZdjHMkLU4yFIqmi0ttt+SsjP4KpGF8g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBocFo1NHN2ZVBhbXJWZWxN + QldyaGVhalJPVzFtQmJraHc5OW1LRElrbUEwCjM0b2krWXhSWXlUOFpFejZJdlFD + UHpyY3ZxR0RkYXdMTTBHanFxUklTOGMKLS0tIGwzOW41ckp6ZHpYMUQzalVXMnVl + dnRlT3MyTXBBcStYZGVRK2h1NEhMMVUKrW3ylOr5J0eEl73FRr4Lm6u4K3a2QR3S + rf3z0QQQqA0sB4Bjk2zy81+BZZbQ69OEDC00rfd3P1LfWO+gfvHxZA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-03-06T11:27:37Z" - mac: ENC[AES256_GCM,data:DHsFdEzXYOIBMCNd54ioefc6mOs6VTeGWGNiUdcbJK0nVaIhNgpoJ9t1IpYi3XiRaEVkT80xaqXLuIkI/rwGKPm7nXTrnS0kIpz5Gs0eK2GEmNnX+EiGdo7YjhjwDCGpzkEYAuwUkpH2dU7XzRcy/o5vUmP0kznnGAnQW5+ZSC0=,iv:l1BtzaQ6SxzwUWSmAPQJC02dVOy+8IetNQlQsR0q30U=,tag:N3s2O4KnSv0+O9oQD5UBlA==,type:str] + lastmodified: "2026-03-07T08:22:49Z" + mac: ENC[AES256_GCM,data:gNvfMlzzfSRJjMY9/2nB21MZ5PNlTPJvy2mHX8LGgYc2PH0l/cfjjpU409n9qfwhtd6kvzZtJJCkN41uWHBZ/CTJmE9xyJCQZ9Fn2jookQjCJ+WT29wkhdz/rQ+ZTK6+2eAgH7ghrcJvaTTmBTnb4i6mttL16R8SU51y6d5zRnk=,iv:ScQu0AqFaiNOHVQG4BFnpPFlXbpmYvU7LIArTxIk1J4=,tag:LwBGeyFacND8QCLG6BizEw==,type:str] pgp: [] encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ version: 3.9.1 @@ -455,14 +455,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cGdPVXVtL1VmelZreERF - RXhhTGlYYmthbDlSajdrVFhVdTRlcHBsaUdZCmxqRG43NERHdjE1RmlnR3BBVnl6 - dGxYVFpPK0ZIVDRNOWN1NVBXY2F3M0kKLS0tIEhpYjZpeUt0SjUybWpXWjJVM3J3 - SGxwVmlxVmFEVC9xOEl0dmVqeUZOZEEK/lbgKCTx3z/4fsyGuExd/h6yRciBWRcK - ZwPnzGinwVdJMyxEJc0LXxtZdjHMkLU4yFIqmi0ttt+SsjP4KpGF8g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBocFo1NHN2ZVBhbXJWZWxN + QldyaGVhalJPVzFtQmJraHc5OW1LRElrbUEwCjM0b2krWXhSWXlUOFpFejZJdlFD + UHpyY3ZxR0RkYXdMTTBHanFxUklTOGMKLS0tIGwzOW41ckp6ZHpYMUQzalVXMnVl + dnRlT3MyTXBBcStYZGVRK2h1NEhMMVUKrW3ylOr5J0eEl73FRr4Lm6u4K3a2QR3S + rf3z0QQQqA0sB4Bjk2zy81+BZZbQ69OEDC00rfd3P1LfWO+gfvHxZA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-03-06T11:27:37Z" - mac: ENC[AES256_GCM,data:DHsFdEzXYOIBMCNd54ioefc6mOs6VTeGWGNiUdcbJK0nVaIhNgpoJ9t1IpYi3XiRaEVkT80xaqXLuIkI/rwGKPm7nXTrnS0kIpz5Gs0eK2GEmNnX+EiGdo7YjhjwDCGpzkEYAuwUkpH2dU7XzRcy/o5vUmP0kznnGAnQW5+ZSC0=,iv:l1BtzaQ6SxzwUWSmAPQJC02dVOy+8IetNQlQsR0q30U=,tag:N3s2O4KnSv0+O9oQD5UBlA==,type:str] + lastmodified: "2026-03-07T08:22:49Z" + mac: ENC[AES256_GCM,data:gNvfMlzzfSRJjMY9/2nB21MZ5PNlTPJvy2mHX8LGgYc2PH0l/cfjjpU409n9qfwhtd6kvzZtJJCkN41uWHBZ/CTJmE9xyJCQZ9Fn2jookQjCJ+WT29wkhdz/rQ+ZTK6+2eAgH7ghrcJvaTTmBTnb4i6mttL16R8SU51y6d5zRnk=,iv:ScQu0AqFaiNOHVQG4BFnpPFlXbpmYvU7LIArTxIk1J4=,tag:LwBGeyFacND8QCLG6BizEw==,type:str] pgp: [] encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ version: 3.9.1 diff --git a/infrastructure_talos/configs/velero-alerts.yaml b/infrastructure_talos/configs/velero-alerts.yaml @@ -31,10 +31,10 @@ spec: - alert: VeleroBackupMissing expr: | - time() - velero_backup_last_successful_timestamp{schedule!=""} > 43200 + time() - velero_backup_last_successful_timestamp{schedule!=""} > 90000 for: 5m labels: severity: critical annotations: - summary: "Velero backup missing for 12h" - description: "Schedule {{ $labels.schedule }} has no successful backup in the last 12 hours." + summary: "Velero backup missing for 25h" + description: "Schedule {{ $labels.schedule }} has no successful backup in the last 25 hours."