Deploy monitoring stack

2026-05-18 21:42:32 -05:00
parent dbf0b18f07
commit 2ed70b4964
8 changed files with 386 additions and 25 deletions
--- a/cluster/applications/monitoring/externalsecret.yaml
+++ b/cluster/applications/monitoring/externalsecret.yaml
@@ -0,0 +1,27 @@
+# ------------------------------------------------------------------------------
+# ExternalSecret — Grafana admin credentials
+# 1Password item: "grafana-admin" in the "mk-labs" vault
+# Fields: admin-user, admin-password
+# ------------------------------------------------------------------------------
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: grafana-admin-secret
+  namespace: monitoring
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  refreshInterval: "1h"
+  target:
+    name: grafana-admin-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: admin-user
+      remoteRef:
+        key: grafana-admin
+        property: admin-user
+    - secretKey: admin-password
+      remoteRef:
+        key: grafana-admin
+        property: admin-password