additional monitoring scrapes

cluster/applications/monitoring/externalsecrets.yaml

@@ -0,0 +1,67 @@
+# ------------------------------------------------------------------------------
+# ExternalSecrets — monitoring namespace secrets from 1Password
+# ------------------------------------------------------------------------------
+
+# Grafana admin credentials
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: grafana-admin-secret
+  namespace: monitoring
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  refreshInterval: "1h"
+  target:
+    name: grafana-admin-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: admin-user
+      remoteRef:
+        key: grafana-admin
+        property: admin-user
+    - secretKey: admin-password
+      remoteRef:
+        key: grafana-admin
+        property: admin-password
+---
+# Proxmox VE Exporter API token
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: pve-exporter-secret
+  namespace: monitoring
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  refreshInterval: "1h"
+  target:
+    name: pve-exporter-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: token-value
+      remoteRef:
+        key: proxmox-prometheus
+        property: token-value
+---
+# SNMP community string
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: snmp-community-secret
+  namespace: monitoring
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  refreshInterval: "1h"
+  target:
+    name: snmp-community-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: community
+      remoteRef:
+        key: snmp-community
+        property: community