cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

alertmanager-ingress.yaml (8734B)

      1 apiVersion: gateway.networking.k8s.io/v1
      2 kind: HTTPRoute
      3 metadata:
      4     name: alertmanager
      5     namespace: monitoring
      6 spec:
      7     parentRefs:
      8         - name: envoy-gateway
      9           namespace: envoy-gateway
     10     hostnames:
     11         - alertmanager.midnightthoughts.space
     12     rules:
     13         - backendRefs:
     14             - name: prometheus-stack-kube-prom-alertmanager
     15               port: 9093
     16 sops:
     17     kms: []
     18     gcp_kms: []
     19     azure_kv: []
     20     hc_vault: []
     21     age:
     22         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     23           enc: |
     24             -----BEGIN AGE ENCRYPTED FILE-----
     25             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3a3NnNnpaVG1zM0pDVlpM
     26             WmZCNlRtSTl1MzRzY2ZnRVJBcE5uUmNUcEZRCnluQXJEUHpqYkdUUWRIRndrR24x
     27             c2NqYnVBdGdjd05mZnRyUFZ6bmkvaHcKLS0tIGVRb3ZNWWY3M3RxTnUxSlV3QUlU
     28             UTJ3UjBCVzFDTy90SnM4Y0hKdkc3MVEK6SzjAX6kOYjRbapqh85ACyQxNx1o8/aQ
     29             7ZPSm1ASI7cQei0MY/Fm+RwTn0S91oC+DlLsddJT6Sb+WUEUMjbGjw==
     30             -----END AGE ENCRYPTED FILE-----
     31     lastmodified: "2026-03-13T10:55:38Z"
     32     mac: ENC[AES256_GCM,data:A71mRe+40KByfAsB/3xrtjotVA0HIn/Y3ouNrI5idPCYNqyXHPENP401iBpOcvS/ITFWbtY4FyNTS97k3ewjgflfAY+ltpYdxDWvWeJfaYmyJ+05H0SmZUfcf+tEgvsBtOvV2vEMwIgrelroNZI64nQVBf+YV4/UGT/Kx1UG8SY=,iv:zYq4ohrbhROFJh4t7QqwtMmO7Swegt3NOoN/wkUyKns=,tag:K+uVmesjvTzjlQVIWMfw2A==,type:str]
     33     pgp: []
     34     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
     35     version: 3.9.1
     36 ---
     37 apiVersion: v1
     38 kind: Secret
     39 metadata:
     40     name: alertmanager-oidc-config
     41     namespace: monitoring
     42 type: Opaque
     43 stringData:
     44     client-secret: ENC[AES256_GCM,data:rwcaoibk1JGmBULzOAvZijMG2JWQ25ooZdKozoovDRk3i+gRIYL4GCNloCq3YydkT7Xq955e9+Tqm5C6oiv7B92b9sFis8Koo9FKArqK4rcNfm0KD2Wf1L0OZ40F00OyByFdHdWtIkLqXdIeF4E5uMYGTMkeGfL3WcBZaOpvU08=,iv:ZiDh8Pb0Cl3535LP7Gdsw/tmETGb/kk6jNm2+lSQBNo=,tag:RoMNYECiCSE75Ye8LqOt0w==,type:str]
     45 sops:
     46     kms: []
     47     gcp_kms: []
     48     azure_kv: []
     49     hc_vault: []
     50     age:
     51         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     52           enc: |
     53             -----BEGIN AGE ENCRYPTED FILE-----
     54             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3a3NnNnpaVG1zM0pDVlpM
     55             WmZCNlRtSTl1MzRzY2ZnRVJBcE5uUmNUcEZRCnluQXJEUHpqYkdUUWRIRndrR24x
     56             c2NqYnVBdGdjd05mZnRyUFZ6bmkvaHcKLS0tIGVRb3ZNWWY3M3RxTnUxSlV3QUlU
     57             UTJ3UjBCVzFDTy90SnM4Y0hKdkc3MVEK6SzjAX6kOYjRbapqh85ACyQxNx1o8/aQ
     58             7ZPSm1ASI7cQei0MY/Fm+RwTn0S91oC+DlLsddJT6Sb+WUEUMjbGjw==
     59             -----END AGE ENCRYPTED FILE-----
     60     lastmodified: "2026-03-13T10:55:38Z"
     61     mac: ENC[AES256_GCM,data:A71mRe+40KByfAsB/3xrtjotVA0HIn/Y3ouNrI5idPCYNqyXHPENP401iBpOcvS/ITFWbtY4FyNTS97k3ewjgflfAY+ltpYdxDWvWeJfaYmyJ+05H0SmZUfcf+tEgvsBtOvV2vEMwIgrelroNZI64nQVBf+YV4/UGT/Kx1UG8SY=,iv:zYq4ohrbhROFJh4t7QqwtMmO7Swegt3NOoN/wkUyKns=,tag:K+uVmesjvTzjlQVIWMfw2A==,type:str]
     62     pgp: []
     63     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
     64     version: 3.9.1
     65 ---
     66 apiVersion: gateway.envoyproxy.io/v1alpha1
     67 kind: SecurityPolicy
     68 metadata:
     69     name: oidc-alertmanager
     70     namespace: monitoring
     71 spec:
     72     targetRefs:
     73         - group: gateway.networking.k8s.io
     74           kind: HTTPRoute
     75           name: alertmanager
     76     oidc:
     77         provider:
     78             issuer: https://auth.midnightthoughts.space/application/o/grafana/
     79             authorizationEndpoint: https://auth.midnightthoughts.space/application/o/authorize/
     80             tokenEndpoint: https://auth.midnightthoughts.space/application/o/token/
     81         clientID: Hi9j2holcUd89OwdmJgoaGppow6RrECQJiTq4Isk
     82         clientSecret:
     83             name: ENC[AES256_GCM,data:1LEXwIOr3sO1drLIr+8ITenbvG1++kTt,iv:46F1LYXgwhIdAPBKc35uEUDfpKyIBDKZPJ70IjVkXsU=,tag:jMTS6vfZ8gELnpGcgzbG/w==,type:str]
     84         refreshToken: true
     85         cookieDomain: midnightthoughts.space
     86 sops:
     87     kms: []
     88     gcp_kms: []
     89     azure_kv: []
     90     hc_vault: []
     91     age:
     92         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     93           enc: |
     94             -----BEGIN AGE ENCRYPTED FILE-----
     95             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3a3NnNnpaVG1zM0pDVlpM
     96             WmZCNlRtSTl1MzRzY2ZnRVJBcE5uUmNUcEZRCnluQXJEUHpqYkdUUWRIRndrR24x
     97             c2NqYnVBdGdjd05mZnRyUFZ6bmkvaHcKLS0tIGVRb3ZNWWY3M3RxTnUxSlV3QUlU
     98             UTJ3UjBCVzFDTy90SnM4Y0hKdkc3MVEK6SzjAX6kOYjRbapqh85ACyQxNx1o8/aQ
     99             7ZPSm1ASI7cQei0MY/Fm+RwTn0S91oC+DlLsddJT6Sb+WUEUMjbGjw==
    100             -----END AGE ENCRYPTED FILE-----
    101     lastmodified: "2026-03-13T10:55:38Z"
    102     mac: ENC[AES256_GCM,data:A71mRe+40KByfAsB/3xrtjotVA0HIn/Y3ouNrI5idPCYNqyXHPENP401iBpOcvS/ITFWbtY4FyNTS97k3ewjgflfAY+ltpYdxDWvWeJfaYmyJ+05H0SmZUfcf+tEgvsBtOvV2vEMwIgrelroNZI64nQVBf+YV4/UGT/Kx1UG8SY=,iv:zYq4ohrbhROFJh4t7QqwtMmO7Swegt3NOoN/wkUyKns=,tag:K+uVmesjvTzjlQVIWMfw2A==,type:str]
    103     pgp: []
    104     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
    105     version: 3.9.1