Squashed 'cluster-config/' content from commit 654f2390

git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c

components/eso/instance/base/kustomization.yaml

@@ -0,0 +1,7 @@
+namespace: external-secrets
+
+resources:
+- namespace.yaml
+- operatorconfig.yaml
+- podmonitor.yaml
+- prometheus-rule.yaml

components/eso/instance/base/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets

components/eso/instance/base/operatorconfig.yaml

@@ -0,0 +1,22 @@
+apiVersion: operator.external-secrets.io/v1alpha1
+kind: OperatorConfig
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "1"
+  name: cluster
+spec:
+  crds:
+    conversion:
+      enabled: false
+  prometheus:
+    enabled: true
+    service:
+      port: 8080
+  resources:
+    requests:
+      cpu: 10m
+      memory: 96Mi
+    limits:
+      cpu: 100m
+      memory: 256Mi

components/eso/instance/base/podmonitor.yaml

@@ -0,0 +1,27 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: external-secrets-controller
+  namespace: external-secrets
+  labels:
+    app.kubernetes.io/name: external-secrets-cert-controller
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: external-secrets-cert-controller
+  podMetricsEndpoints:
+  - port: metrics
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: external-secrets
+  namespace: external-secrets
+  labels:
+    app.kubernetes.io/name: external-secrets
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: external-secrets
+  podMetricsEndpoints:
+  - port: metrics

components/eso/instance/base/prometheus-rule.yaml

@@ -0,0 +1,20 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: external-secrets
+  namespace: external-secrets
+spec:
+  groups:
+  - name: ExternalSecrets
+    rules:
+    - alert: ExternalSecretSyncError
+      annotations:
+        description: |-
+          The external secret {{ $labels.exported_namespace }}/{{ $labels.name }} failed to synced.
+          Use this command to check the status:
+          oc get externalsecret {{ $labels.name }} -n {{ $labels.exported_namespace }}
+        summary: External secret failed to sync
+      labels:
+        severity: warning
+      expr: externalsecret_status_condition{status="False"} == 1
+      for: 5m