commit 6f5a45c8c66e416235ed53597291c1e77a66764e
parent 861ca600aab4b89d4eb4487bebab8e55fb35901b
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Sat, 14 Mar 2026 16:06:59 +0100
try to fix some alerts
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
3 files changed, 88 insertions(+), 53 deletions(-)
diff --git a/apps/talos_cluster/monitoring-stack/custom-rules.yaml b/apps/talos_cluster/monitoring-stack/custom-rules.yaml
@@ -0,0 +1,31 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+ name: custom-node-rules
+ namespace: monitoring
+ labels:
+ release: prometheus-stack
+spec:
+ groups:
+ - name: custom.node.rules
+ rules:
+ # NodeMemoryMajorPagesFaults re-added with control-plane nodes excluded.
+ # Control plane nodes are intentionally undersized and expected to have
+ # occasional major page faults; alerting on them causes noise.
+ - alert: NodeMemoryMajorPagesFaults
+ expr: |
+ (
+ rate(node_vmstat_pgmajfault{job="node-exporter"}[5m]) > 500
+ )
+ unless on(instance)
+ label_replace(
+ kube_node_role{role="control-plane"} * on(node) group_left(internal_ip) kube_node_info,
+ "instance", "$1:9100", "internal_ip", "(.*)"
+ )
+ for: 15m
+ labels:
+ severity: warning
+ annotations:
+ description: 'Memory major pages are occurring at very high rate at {{ $labels.instance }}, 500 major page faults per second for the last 15 minutes, is currently at {{ $value | humanize }}. Please check that there is enough memory available at this instance.'
+ runbook_url: https://runbooks.prometheus-operator.dev/runbooks/node/nodememorymajorpagesfaults
+ summary: Memory major page faults are occurring at very high rate.
diff --git a/apps/talos_cluster/monitoring-stack/kustomization.yaml b/apps/talos_cluster/monitoring-stack/kustomization.yaml
@@ -15,3 +15,4 @@ resources:
- alertmanager-ingress.yaml
- prometheus-ingress.yaml
- prometheus-backend-policy.yaml
+ - custom-rules.yaml
diff --git a/apps/talos_cluster/monitoring-stack/prometheus-release.yaml b/apps/talos_cluster/monitoring-stack/prometheus-release.yaml
@@ -19,6 +19,9 @@ spec:
crds: CreateReplace
# https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml
values:
+ defaultRules:
+ disabled:
+ NodeMemoryMajorPagesFaults: true
kubeProxy:
enabled: false
alertmanager:
@@ -29,8 +32,8 @@ spec:
resolve_timeout: 5m
smtp_smarthost: smtp.fastmail.com:587
smtp_from: ops@nordgedanken.dev
- smtp_auth_username: ENC[AES256_GCM,data:YHzty80wAQ4RFDavXEsQNLUXRJEH57XE,iv:c0a3Ylw5emL/D2XMwKFTSKsEBMQ51J++zvt969JL2uw=,tag:Fq2Lj7XH9Hi40Y2xnF3OcQ==,type:str]
- smtp_auth_password: ENC[AES256_GCM,data:EwvReCzKbRL812LKvd5eOA==,iv:XbLx6MBpauEHXakfOrDNtbdWOqkOZA/1GFtStqGYFFQ=,tag:GwxfPf6GlaEBof0GQf1T1g==,type:str]
+ smtp_auth_username: ENC[AES256_GCM,data:Mo3P1MGqkvBqnAnyRD2H8n5mR2pFa5Q0,iv:c0dttME9mN+r0eBN1rp5pb1mKL4GP/TjvFt0XEwkdbU=,tag:5lTvltnsrsWKqpLWkijipg==,type:str]
+ smtp_auth_password: ENC[AES256_GCM,data:RWBcINgdx9S2JnahnbOCCQ==,iv:bghGHoRVueN4pC4HaUJjSaQe0dsnbpX4hOL7NlXm+U4=,tag:gEm5dAPs6pxCm2P9zajxMA==,type:str]
smtp_require_tls: true
route:
receiver: email
@@ -111,7 +114,7 @@ spec:
objectStorageConfig:
existingSecret:
name: thanos-objstore-secret
- key: ENC[AES256_GCM,data:u7KcZ+E0,iv:TLe5TYe1kL5rXHQ249nWPhaJTH8SSe4hUtZXVShEfDE=,tag:sga1aupfUoe3vgGUGiLHTg==,type:str]
+ key: ENC[AES256_GCM,data:yuiOo2EB,iv:00CEd3P+QL3mIVpIe15agmcN/27bpEf0R3CYyFdVoyQ=,tag:aMmhJ857MaBL8vEVHX9CeA==,type:str]
storageSpec:
volumeClaimTemplate:
spec:
@@ -122,7 +125,7 @@ spec:
requests:
storage: 10Gi
grafana:
- adminPassword: ENC[AES256_GCM,data:zadyj4og4KWwSuyXzu6sgVJYEfxTQtOIHIRgiSSfFoUJiSDbGff7TyBx+7lNFHAyGD1DQ5NdkMbFpwaIY4Royg==,iv:3aNL4BwcVjGC02SxsW6BhY92jjeYKQDX16DQnFG82Uc=,tag:bzFUdZxK2ErtfuhVGgPvRQ==,type:str]
+ adminPassword: ENC[AES256_GCM,data:ifzzu7pWFlcxiaYJoly7vN44V8jBIfoq8Tm4ZRTNgZKWpfFFkqPHDacRd7LdGOVXVKHbsA+IC1qsmJrJR9bJuQ==,iv:tZgpLFkV1ck5f1c+z2k7oZni8HzkFGaXYEJ2MaKZXH8=,tag:uPc+/y+HE+xF0bovEuKCRA==,type:str]
sidecar:
datasources:
# Disable the auto-generated default Prometheus datasource so it
@@ -182,7 +185,7 @@ spec:
database: draupnir_synapse
user: grafana-ro
secureJsonData:
- password: ENC[AES256_GCM,data:o0JiObRHwRWWSE37W8S5QuQ1xlBSUWiRIYmvEIu+lT2fo1U+R87iN3ZNMmbBM3OqNDR2JnIF3gnrqNcSZJQNsw==,iv:NrDJS6eEoUFjmjOKcBhI+ur3r3O8wjEU847VkrFLccE=,tag:gHhkEz9x69W4yqKLb7rYlA==,type:str]
+ password: ENC[AES256_GCM,data:Z73wFEe/UXXxUPZXet2IN7i4AWaiehyR707NyIHW1Sg+NzmxSag77tVVJWVPAVG75zHD+kU4gVPcknHuWMmMQQ==,iv:6Jer5PTNH6gekBHEbraHlib5qOnmDoTATYdWD0s9w/0=,tag:DfHs20BVPUuG/Kaw6cbpwA==,type:str]
isDefault: false
jsonData:
sslmode: disable
@@ -206,7 +209,7 @@ spec:
database: connectivity-tester
user: connectivity-tester
secureJsonData:
- password: ENC[AES256_GCM,data:P3Nx57F71hPHuw/dzw0Vl/oDhZVeQb0ZM+3ptulwEjQ9mYjQ760yEPPkgWq27uS19h3fqqqm28MSguGD3UaZYg==,iv:qt6ntDmzvLELjeH+C8ljjp4hgR4Jdzw4U2Gn1EJanZw=,tag:JD5apuVUjUn1zvs5aWRndw==,type:str]
+ password: ENC[AES256_GCM,data:xhjpBtTSTjsb1C8y/mxNV4fnIGJBN6PswA1mR5XLQ4BMjnEvNrmjPDb60QXuzhxBkjL18c4vFlLBtT9afhgxng==,iv:p655YSlOnpTQuXPCLuL7Lvi1buly/nBYy06Axim8/G8=,tag:+oEEWy6r3/WqNxJcew75bA==,type:str]
isDefault: false
jsonData:
sslmode: disable
@@ -224,7 +227,7 @@ spec:
host: smtp.fastmail.com:465
from_address: ops@nordgedanken.dev
paths:
- data: ENC[AES256_GCM,data:yr9G9rchwEQdeM94GgdbWag=,iv:c5HPvIt1IyWOVAV+C95XkdBfLZqgnvfK/jMUAhWpcEw=,tag:o8VRzSZt1smHMYrDI/nnmg==,type:str]
+ data: ENC[AES256_GCM,data:VICfKHgMqgcjrkQxPodNygo=,iv:/VGqAik9B1TYQnGxyN44G1yYsBn0Jxbe/oW5sGaAqJU=,tag:ZccuYrycS4WZt8wVqG6wKQ==,type:str]
logs: /var/log/grafana
plugins: /var/lib/grafana/plugins
provisioning: /etc/grafana/provisioning
@@ -240,8 +243,8 @@ spec:
auth.generic_oauth:
name: authentik
enabled: true
- client_id: ENC[AES256_GCM,data:jjb5o8qDno85z3PKflkhN8Va0CLLUDhW/29c0kKVQhy/qnHa3xrqzdaoleh+KJkOqlo=,iv:r4M6bcTNu1+zbj1zwY6KehcHgl4SoF1YRXd9wl48Jmw=,tag:RxXzgqoooJFADfDRoWf8xw==,type:str]
- client_secret: ENC[AES256_GCM,data:gOjnkHm67m7oFjpXl5pUwgG6qBQueG8AKt6Wf3fJoUvjMspmIn+aVQps2Nudc3crMyh9cW0s,iv:z7/XnLUm7b4/X7UJGXkpw+w2cAN/0ZMDVfetY3diVWk=,tag:edOMs09w0NV56is4FjAcuQ==,type:str]
+ client_id: ENC[AES256_GCM,data:vC7wSpZmpFKnU931t3EAjcKVfjmPILD+PIKlHEa7qB6JTbPxfrhO/00upkPgeg1z23Q=,iv:dvdA07VK5mhUoR/x5kbXY9nsDiEsyzSOQj19zz7p13E=,tag:0WhdmAj2X6qm7jSDnzRztQ==,type:str]
+ client_secret: ENC[AES256_GCM,data:8JY04aMe8E36XuJCWXwc9wCyOx+Y1dg4K7W4KW7o4NLkbbSEDIkzfd+vcbLJfvI/oCFrBUHA,iv:t9JH5HI1+9h05nEk+HFR79tAdU+5NSyYgPkBGKCnboY=,tag:5zRXlDqnJ4zLZTchZfR9/g==,type:str]
scopes: openid email profile
auth_url: https://auth.midnightthoughts.space/application/o/authorize/
token_url: https://auth.midnightthoughts.space/application/o/token/
@@ -262,48 +265,48 @@ spec:
title: CertManagerHittingRateLimits
condition: B
data:
- - refId: ENC[AES256_GCM,data:og==,iv:ckkO3eWCB9UJQtQJyNrEsktGXgWCNhzPqxUzvRh3d4c=,tag:shvwlGjaBG78pcJ2HdqdUw==,type:str]
+ - refId: ENC[AES256_GCM,data:AA==,iv:GSk+Aw8EBOmiZMiLmoqGocFGUzyHcuosZUYMAt/YT9s=,tag:I1XQL+z6GriwrVwSIUAEHw==,type:str]
relativeTimeRange:
- from: ENC[AES256_GCM,data:9n/q,iv:gBASmyHq3+t4AtzwaGTCW6Jtl8o6You0a3cx0APRPjA=,tag:7LqKp8wyYp72U4rMobyxpw==,type:int]
- to: ENC[AES256_GCM,data:JA==,iv:gwQSEEMzvE3nk5Dfz+nzx1QZpef5cYxIlpHqKh0gF2I=,tag:cQEa7JNmy76lHBLbOqrpTQ==,type:int]
- datasourceUid: ENC[AES256_GCM,data:lJSyy9Aij0ivqA==,iv:aYJ7AMdAsNia8HkIM5nC+vJRIyt+4XIPWSuCpR3ziAw=,tag:PJ0EKVsaDW7jReU1K8kIEg==,type:str]
+ from: ENC[AES256_GCM,data:Y9gd,iv:KPCuYi9gLbErZcmd2nDp74Qs2PUYleiDUiL3vNJV8ls=,tag:fUz4eJNBFA0VVaG24AVOyA==,type:int]
+ to: ENC[AES256_GCM,data:mA==,iv:73MRODil02ix25ej3ZBD9cqgvHfnpeeOaeKWqlbJsBY=,tag:upjDBHKD062a8xGKcMI7kA==,type:int]
+ datasourceUid: ENC[AES256_GCM,data:XC+KlbR5hHMMiQ==,iv:/wQ3YKASGQkDli6IuqUsi3ACvhny1c9MOrobXYNLO90=,tag:+c/8yHxMQXb4iPn8xTkd7A==,type:str]
model:
- editorMode: ENC[AES256_GCM,data:Znb+HA==,iv:H8wh1VYg9bktmwWo6VR0LwHel64UMqj1ZX+M9hNPjlo=,tag:hfMz4G0TwV2/V4UkuXkwog==,type:str]
- expr: ENC[AES256_GCM,data:l8HVouweK4aLWXQp7qaTkqcmkBz0mjSTli2hVwsRoJ3VAAJGwnus14Qlk6L50hetBz285N9uNMz0UbTG7rYkdBiXGnZLkHLwx6uFSa7QkC/bdAul7NVhavMxQ481JF4LFjnAia++08dSh6oaEwz2At8D,iv:EScHAOrSD0brgy2VTJRMz70zhRue38cUVIOzL50ZjRs=,tag:qZi6/sO38IN36IkGPxrt6w==,type:str]
- instant: ENC[AES256_GCM,data:cpP0vw==,iv:yGeSuf/s1b5hvhYrUwUuZNCTJeQy7gW9F2pwmipnC2I=,tag:XR1WB+GVG8BM/5BRiL8/9g==,type:bool]
- intervalMs: ENC[AES256_GCM,data:1g9jxA==,iv:GzdQN/KxuQLxDaaYjDzvnSNL9BnRa1GsdNN6j+oDjSw=,tag:Q/aS5UBxqzmBqgtzhecSpA==,type:int]
- legendFormat: ENC[AES256_GCM,data:RDlbHFZ9,iv:1vdEyiNjuFaTpWjNBi+fIC4vyFcectGxHEIVRyN4rwg=,tag:30NNiCYRXe5ynE8GqRvwhQ==,type:str]
- maxDataPoints: ENC[AES256_GCM,data:BRNRyMk=,iv:hJZcXaqFamOZhYjDUnkt5822KodI0E24RksQR72+nms=,tag:RJVMVHpLGs3gbmN3+MflMw==,type:int]
- range: ENC[AES256_GCM,data:k72D3qk=,iv:xL0kYbSRlu3GnJT3sx4ndFBgskL6UEmIlmfLsELFHpM=,tag:L9XwwfydPNVYH9XEjOSFlQ==,type:bool]
- refId: ENC[AES256_GCM,data:0g==,iv:4JP+B69o2MQLrhs/TNEGrC6YW2kHa06ylFS+YzYiRQg=,tag:M9QioKEixtWvl+6o0nMbBg==,type:str]
- - refId: ENC[AES256_GCM,data:EA==,iv:xmMwt1OU0/BvQ8E5fws1YTGZUNTXarOGYOnUl/z5seE=,tag:ziGR7DEM4fYU0qCDkyRMSg==,type:str]
+ editorMode: ENC[AES256_GCM,data:q3w5HA==,iv:u61ll9KvSqwihx9paihVdA7m5W2RmWr5yIAMIoZUT6k=,tag:ZnIb+gfK67smzyuBaU3tfA==,type:str]
+ expr: ENC[AES256_GCM,data:zKnx9WrKizU+lItToV+OEG0wbO1rvsGXN+quTfv9w2PsJ3lgkwrQuSs2/2IoZfjCenk9MlLaHW1Y3FzYvYn+i/NLz90N2bOhFC9RXuBnWzBtL9XgR3f3+FmURb33Sd4rv8zSGHyJGRL/BoXcp8yPs2IP,iv:hk4V3X1PzCxmxjRtvuXF0Vlg63CEjD/5StC/uZY9jUs=,tag:lWJ6UPP4qNgKESsFSDW6jg==,type:str]
+ instant: ENC[AES256_GCM,data:roWCLQ==,iv:Ia6sqsKBvTNqeoNtVKonNKXWJo5/7jyZUO7TYHBD9Gk=,tag:X/zqNmKo+RXDe6rqKNHIoQ==,type:bool]
+ intervalMs: ENC[AES256_GCM,data:OfMPgg==,iv:CaOX6ee8v/L9B7G1Dd05i6i4zGyuDit9HBdwyySrk4A=,tag:Ke9sJNl90qbvch3ZKBqoaA==,type:int]
+ legendFormat: ENC[AES256_GCM,data:EAKeoRct,iv:agCwtoOM3sGrQfFhtGz6xaUL4HEK32QRB91ZSd3UhZU=,tag:2d3lpLxWy3YVqHxibRBCUQ==,type:str]
+ maxDataPoints: ENC[AES256_GCM,data:Cxs8tu0=,iv:gFIztmoRE+vyFTcoNCy8VHZ5TY74RXoiHbXL6bdAX40=,tag:8hwnlNx6pGwtZYp+rTuy6w==,type:int]
+ range: ENC[AES256_GCM,data:Av94/3Q=,iv:N7iQaLwWQ6TvT3M/t8ejMENGD67syKf2Jx5FnYpEmng=,tag:mOn+VPU2uX3saJRr97fUXw==,type:bool]
+ refId: ENC[AES256_GCM,data:bg==,iv:Gs2O40DbhIVvcqTLwTG20SnXjxj1ao5IkqkWUCbhJcc=,tag:it+dePmJGkg0x8pPz2cAMg==,type:str]
+ - refId: ENC[AES256_GCM,data:+g==,iv:TG3qK266T02AIgKJR4SsCVe1dJRybb94JAG3thK2O4o=,tag:KYfw4VC//nvmjWu//DGwxA==,type:str]
relativeTimeRange:
- from: ENC[AES256_GCM,data:qdhp,iv:lo8IqbSnRP07IbsUAfptUrxB7h5e0hxS+UicNg0jX3Q=,tag:rIZdw4+hxWN1kBPlCDH3kw==,type:int]
- to: ENC[AES256_GCM,data:Gw==,iv:AjK0GVfQQ6aMrPUz0sm4ZC9S0Klxz3jkr6/PLnuF8Lk=,tag:SwiH2SbheJBkYMqh8WdSow==,type:int]
- datasourceUid: ENC[AES256_GCM,data:oeO5HHeiF/M=,iv:pz6sJTuvBu9zh0GwUFj4s3SnrzMtelO3DjDit3X4YVc=,tag:PpEsbnFEzgdmgYQbapLSbw==,type:str]
+ from: ENC[AES256_GCM,data:xig6,iv:WnPWVKahA2+ZsUt0nDtwwZx8EKfaqGWRKfsJ+yDZfi4=,tag:gVb1frEQPY3OSJenr5PX/w==,type:int]
+ to: ENC[AES256_GCM,data:CA==,iv:OPxGXQ0EAhar4xpwde1s5VuucIMJc4XHYAlc/3QP+Jo=,tag:ctyZsqFZuG12F8ggPvjPww==,type:int]
+ datasourceUid: ENC[AES256_GCM,data:p3ZEMOsF9ZY=,iv:RnBq/8T28ymsUZU2kxHLY0yQSO7w671HnLrFxCaFw8M=,tag:EXCqtGCw0cuvXjo5pEu8Yw==,type:str]
model:
conditions:
- evaluator:
params: []
- type: ENC[AES256_GCM,data:dds=,iv:tzSM4JZSUhLJrJdf4nWUN/HDwZ8tqIrSHK6H3cav5AM=,tag:D1FK2x1AGYUNufYqOnF9kg==,type:str]
+ type: ENC[AES256_GCM,data:BKI=,iv:8H53p5jkFZryaLSUEEKbCNqJcptO/XstsuoVrYmj8o0=,tag:qnnOMHpsH1N1sa264ZIrpA==,type:str]
operator:
- type: ENC[AES256_GCM,data:vBi7,iv:ww9DDPVpzxTUKdne7vpnpYolqSNLVQfMsDED5uzzzJI=,tag:ZcKTfQk3FGxXiZS0fhx9Vg==,type:str]
+ type: ENC[AES256_GCM,data:fxob,iv:1DWf+lUmiKB6KUMYIBRd34dR55Ub79MFuLb8NSnOuMQ=,tag:g+50+4/YE6PHlHcZAliLIw==,type:str]
query:
params:
- - ENC[AES256_GCM,data:jg==,iv:+FMlEhWOL/CXqcgkWIGPGMOI7RzxOgRH9csYWyog8QQ=,tag:cvJvsB90SkJNdw4Q7V6aQQ==,type:str]
+ - ENC[AES256_GCM,data:AQ==,iv:2DlpmllbOBQrf0zrSnOeTcttwRG0vCVFfjuuKAzr+1M=,tag:aBfzuuvXrRB23hiyRoKHWQ==,type:str]
reducer:
params: []
- type: ENC[AES256_GCM,data:8yAFdw==,iv:+Vq0h8UA/p+FI+WPiLIeMrWySWkXTiXOXsIX7iOGhDQ=,tag:zYhsS2xodS9haVJuEJqfWA==,type:str]
- type: ENC[AES256_GCM,data:3raKoRo=,iv:yZPxIyfxlxKk93BLDgsJyR8ivxjmv+nQhFBuKRDgpa8=,tag:JnObrFuGzIcqoPD9MjnNww==,type:str]
+ type: ENC[AES256_GCM,data:YVimDA==,iv:nRc60xVbKngJBzS/XwklWUQjP3GeTOWutsYYe/oRx3s=,tag:9itiAvex0eNkkN5IlrCznQ==,type:str]
+ type: ENC[AES256_GCM,data:dO8I9I4=,iv:PRKnUZt21RTrIPj40cVZ+AQitfScwg8biN5zTs5SPNU=,tag:wcEcwbe2xz9FVdBSEiS2Qg==,type:str]
datasource:
- type: ENC[AES256_GCM,data:12ZESH3wGOM=,iv:QxngLPJvD3Gy+5Qrshwv3GaCemr4qnGl1iwuW971azY=,tag:aVh+7N1DgUathveQSjWqEQ==,type:str]
- uid: ENC[AES256_GCM,data:q4Upy6PF1A0=,iv:VjI8VApRLaYgaoZzTCpyNwlUAlkab0jizePGVXESLFE=,tag:Zh3HULPoZ8rTygdyusEVdA==,type:str]
- expression: ENC[AES256_GCM,data:BA==,iv:7w/G8iNnI/6/DTgQ2G4EgCuDyZN79roy3uXpZSN3oa8=,tag:RwiGa/dc6CnNeodfI6Dtgg==,type:str]
- intervalMs: ENC[AES256_GCM,data:oibmmg==,iv:WiA5UfMlz2rPJJ224hpzAfb2OJIQ6a2N0yGUEjh9mXo=,tag:2iyi4VjFFnjqRlrsJyK0ng==,type:int]
- maxDataPoints: ENC[AES256_GCM,data:VRNiKx8=,iv:l3Q0EyOVRjZ4TJiJ7UrQP04ss3oAsDSS5ZooNouZi/A=,tag:2IuC4j/tLj307hj0FX29nw==,type:int]
- reducer: ENC[AES256_GCM,data:7sLrtQ==,iv:oRK1VeZnUzemowAG2x4aNpDPlFd3uS+n7lTn/TX/AAM=,tag:MzYQIH0m6kqBF1XfYTlI/g==,type:str]
- refId: ENC[AES256_GCM,data:0A==,iv:NX9fpEbxJj3fUr5DhgVAZdt3lDk2PQkZz/A6nwG4izI=,tag:qp2Sh0rGQJXRnxRmSvAgww==,type:str]
- type: ENC[AES256_GCM,data:X7dLkUtP,iv:bxnRZVpW5khhCMj42EkD+baGxHxfbTkdV/Oeq6B6Y6Y=,tag:MuoonEQK4U73KWOF/jZ05A==,type:str]
+ type: ENC[AES256_GCM,data:Zk4sV+5nN4Q=,iv:tMbxMJvYoOhK+sX1GAPCyMkrBUGU32RDBU6l+uYIAmc=,tag:WkY/FVqMA8VF5J7cqR39aw==,type:str]
+ uid: ENC[AES256_GCM,data:G8f+0B4zff4=,iv:DXwvjOeLaK/oWB3zoNb+J7L+h6qrnT25AU1XTuYx05A=,tag:cQprGwrJ5+x2pi/V2XRybA==,type:str]
+ expression: ENC[AES256_GCM,data:Sg==,iv:0vgIyqp6UG1bAMlL4lFxtVNmdNp0QwN9GoV0yLS+/Wo=,tag:+CnyjSCtBbrVOETFbKeLWw==,type:str]
+ intervalMs: ENC[AES256_GCM,data:shIwpA==,iv:rAnBso3b5QbAjr36LxIVgXspD+TqoZMaxyXaE3nC/ew=,tag:HZaNL0Tv8iHs4V68DtBgxQ==,type:int]
+ maxDataPoints: ENC[AES256_GCM,data:rxBXNCE=,iv:tDT+f8ZmsqVBXhdNFUulgEz5Kwh+0UBRAQPyo62BpYY=,tag:h5Bn8WRiePCgY/k3qwgulQ==,type:int]
+ reducer: ENC[AES256_GCM,data:LhanyA==,iv:tOuk7GlKS0Csk/LebhKx0RdgwDqBTfgElw4FY6lsx2I=,tag:RFuuE8klH19VyI/in3QFVA==,type:str]
+ refId: ENC[AES256_GCM,data:yQ==,iv:WVmzRTbItAYXJZ5a9XSthuCggGJP8n9qyc5Z+tuTZ4A=,tag:tpyGVQMp/N/NXylPUawnPA==,type:str]
+ type: ENC[AES256_GCM,data:2+Z15fuC,iv:7r7A/XjPaV2l0X5bh7XIp14dR1T2fyzM/i1oTEbZ6G8=,tag:Di7q8Jm3CuiDcQ4GXGK7cA==,type:str]
noDataState: OK
execErrState: Error
for: 5m
@@ -326,7 +329,7 @@ spec:
sendReminder: true
frequency: 1m
settings:
- addresses: ENC[AES256_GCM,data:UzxGD098p94i71K1NByfb4JKHxIqYe2arTxTDbi1L+pix6oNTg0bWg639Q==,iv:kWvmkC6DVelU8bWkGQxUcETp7STABBWXomfqVCONRro=,tag:Z30ncJWLIfSmH+Cs+c1H0Q==,type:str]
+ addresses: ENC[AES256_GCM,data:91pqyrAAjDs7ihPYlsl15JiaL3AzdxLIiZAOu1eZhBwaeZwwdf6nGA4ZNQ==,iv:kDqpe6nOjeICG0gYzu3a9n81uaHFFOwdAyvHxQtUS0M=,tag:HQSIktvZcjsEC0RWFBI2Ww==,type:str]
policies.yaml:
apiVersion: 1
policies:
@@ -362,14 +365,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVTVDWmNhODMwT3N0Q003
- STFaNFpybEtaRjdRQ0lmajIzdnNQM3B4cFRzCklVbHNtc3BhdDRQcUtHUWt2LzN3
- RkhJZnR2Tnp0SDdudU9NZlVIdVRTTncKLS0tIHFFS0p6Zk1vR3R2RHBNSWtrdERP
- cVdNS2RuY0liN1A1Q3NQUXNKUmhadUkKUHqyUwvUVy/dVkYUOrLIQAvn4VrcSm5x
- 0nk6ajqJ8SphUzYGRIptICgSfGyVNUoy7xU4TIaj+BzjjMcWHFrUUg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxQyttNWppWW1xdUlJZU11
+ eENJWXd3dEpEQThsZVV3SUhYR1NNR3YyS3djCnFNaFNkd3ZxL3J3aXVPcjVKalZ4
+ S2ptLytrcTVuOUN0MGlUalFmWis4UjAKLS0tIDUwS3lWcTN6YXRQVzBKUngwdmZX
+ dzVPTjU3TVZxZnYxNEZBNkdndUE1V1EK+UpftDTPskISciWDmQVxX2aJLEW0EBjQ
+ YniYqfOSjJNDcHeXL5BlS/iBG/pxFeov3dbHzCirZs7NAhOlNL/AkA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-13T19:23:30Z"
- mac: ENC[AES256_GCM,data:NYAt+t9gTU79z2c6CfTw+k9jQv4WsJoYBNAJngU658+mRG36Uq0vYcyGxl/qX+BzD39GvKQiYHrLdbJ+asRm8ktml67lDwFdsZgTmbmFHQiLGeV4h3lT5GgmTdiLfJ0jcSGZCY0wkTeH6Ok8XmDlkstYMGI6WpwbeCMxBPI6Zz8=,iv:WK5+CYWUGoZIQIh08pBdl+gP11ywWLh8vDbyDVToG+Q=,tag:zutpNQ0YObztSHo9XhG9mQ==,type:str]
+ lastmodified: "2026-03-14T15:06:44Z"
+ mac: ENC[AES256_GCM,data:DCBZ+GJ6R/4NFr4StbrSUAYf7NURoQIT0uCYSQ1+P1VRh+ubcHiaF0zZqahrFhbE/gAYs7zcVsOSPA2AuDenkUW4EZbcHzc6Itl2P/h/TKZlSkN8/E3+Nq4qPrLk42hk/ax8irnKMA5z0VfePcBhXnn6VzNEi3d3pWjW3XKZFzs=,iv:pIsNYw7B4Ojs2yDUAesIztfl8pqnP1PUYF2cKNvwc3s=,tag:UNGXqkUZgmq0HIxjJbpu3g==,type:str]
pgp: []
encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
version: 3.9.1
@@ -401,14 +404,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVTVDWmNhODMwT3N0Q003
- STFaNFpybEtaRjdRQ0lmajIzdnNQM3B4cFRzCklVbHNtc3BhdDRQcUtHUWt2LzN3
- RkhJZnR2Tnp0SDdudU9NZlVIdVRTTncKLS0tIHFFS0p6Zk1vR3R2RHBNSWtrdERP
- cVdNS2RuY0liN1A1Q3NQUXNKUmhadUkKUHqyUwvUVy/dVkYUOrLIQAvn4VrcSm5x
- 0nk6ajqJ8SphUzYGRIptICgSfGyVNUoy7xU4TIaj+BzjjMcWHFrUUg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxQyttNWppWW1xdUlJZU11
+ eENJWXd3dEpEQThsZVV3SUhYR1NNR3YyS3djCnFNaFNkd3ZxL3J3aXVPcjVKalZ4
+ S2ptLytrcTVuOUN0MGlUalFmWis4UjAKLS0tIDUwS3lWcTN6YXRQVzBKUngwdmZX
+ dzVPTjU3TVZxZnYxNEZBNkdndUE1V1EK+UpftDTPskISciWDmQVxX2aJLEW0EBjQ
+ YniYqfOSjJNDcHeXL5BlS/iBG/pxFeov3dbHzCirZs7NAhOlNL/AkA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-13T19:23:30Z"
- mac: ENC[AES256_GCM,data:NYAt+t9gTU79z2c6CfTw+k9jQv4WsJoYBNAJngU658+mRG36Uq0vYcyGxl/qX+BzD39GvKQiYHrLdbJ+asRm8ktml67lDwFdsZgTmbmFHQiLGeV4h3lT5GgmTdiLfJ0jcSGZCY0wkTeH6Ok8XmDlkstYMGI6WpwbeCMxBPI6Zz8=,iv:WK5+CYWUGoZIQIh08pBdl+gP11ywWLh8vDbyDVToG+Q=,tag:zutpNQ0YObztSHo9XhG9mQ==,type:str]
+ lastmodified: "2026-03-14T15:06:44Z"
+ mac: ENC[AES256_GCM,data:DCBZ+GJ6R/4NFr4StbrSUAYf7NURoQIT0uCYSQ1+P1VRh+ubcHiaF0zZqahrFhbE/gAYs7zcVsOSPA2AuDenkUW4EZbcHzc6Itl2P/h/TKZlSkN8/E3+Nq4qPrLk42hk/ax8irnKMA5z0VfePcBhXnn6VzNEi3d3pWjW3XKZFzs=,iv:pIsNYw7B4Ojs2yDUAesIztfl8pqnP1PUYF2cKNvwc3s=,tag:UNGXqkUZgmq0HIxjJbpu3g==,type:str]
pgp: []
encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
version: 3.9.1
