sync and bump promstack

Signed-off-by: clux <[email protected]>
clux · Oct 2, 2024 · c3d11b7 · c3d11b7
1 parent 5bbc47a
commit c3d11b7
Show file tree

Hide file tree

Showing 8 changed files with 34 additions and 4 deletions.
diff --git a/bootstrap/flux.yaml b/bootstrap/flux.yaml
@@ -22,3 +22,11 @@ spec:
   sourceRef:
     kind: GitRepository
     name: homelab
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/enforce-version: v1.31
+  name: flux
diff --git a/bootstrap/promstack.yaml b/bootstrap/promstack.yaml
@@ -38,3 +38,11 @@ spec:
   sourceRef:
     kind: GitRepository
     name: homelab
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: v1.31
+  name: monitoring
diff --git a/charts/promstack/Chart.lock b/charts/promstack/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: https://prometheus-community.github.io/helm-charts
-  version: 62.3.1
+  version: 64.0.0
 - name: tempo
   repository: https://grafana.github.io/helm-charts
   version: 1.10.3
-digest: sha256:64e3b9f68c825a6d93125466a3a88363921d40d30ace70993e59b90fb575087c
-generated: "2024-09-03T22:15:50.364679487+01:00"
+digest: sha256:59aa8e8e93a39f00e5b3e6ef32394650c8bc62e95652b72e53b043bcd186dd23
+generated: "2024-10-02T23:39:39.080739422+01:00"
diff --git a/charts/promstack/Chart.yaml b/charts/promstack/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: promstack
 description: wrapper over kube-prometheus-stack and tooling
 type: application
-version: 0.6.2
+version: 0.6.3
 dependencies:
 - name: kube-prometheus-stack
   version: "*"

diff --git a/charts/promstack/charts/kube-prometheus-stack-62.3.1.tgz b/charts/promstack/charts/kube-prometheus-stack-62.3.1.tgz
diff --git a/charts/promstack/charts/kube-prometheus-stack-64.0.0.tgz b/charts/promstack/charts/kube-prometheus-stack-64.0.0.tgz
diff --git a/charts/promstack/homelab.yaml b/charts/promstack/homelab.yaml
@@ -38,6 +38,10 @@ kube-prometheus-stack:
       enabled: true
       hosts:
       - grafana.clux.dev
+      tls:
+      - secretName: grafana-tls
+        hosts:
+        - grafana.clux.dev
     grafana.ini:
       server:
         domain: grafana.clux.dev

diff --git a/charts/promstack/values.yaml b/charts/promstack/values.yaml
@@ -94,6 +94,13 @@ kube-prometheus-stack:
       namespaced: true
 
     grafana.ini:
+      auth.anonymous:
+        enabled: true
+        org_role: Admin
+      auth.basic:
+        enabled: false
+      auth:
+        disable_login_form: true
       analytics:
         check_for_updates: false
       unified_alerting:
@@ -187,6 +194,9 @@ kube-prometheus-stack:
       - sourceLabels: [__name__]
         action: drop
         regex: 'container_(memory_failures|last_seen|memory_kernel|memory_failcnt|blkio_device|oom_events|start_time|threads|ulimits_soft).*'
+      # drop interface label for network metrics (unused in computation)
+      - action: labeldrop
+        regex: 'interface'
       metricRelabelings:
       # Drop almost all kubelet metrics, only want cpu/memory usage
       - sourceLabels: [__name__]