New kube-state-metrics.yaml: Deployment, Service, and ServiceAccount for kube-state-metrics v2.15.0
Bound to the existing kube-state-metrics ClusterRole already in cluster-role.yaml
Runs as non-root (uid 65534) with read-only filesystem
Restic ExternalSecret
New restic-secret.yaml: ExternalSecret pulling username/password from Bitwarden item cb04cb1b-1037-40d6-a187-b375015e7ef6 via bitwarden-login ClusterSecretStore
Updated deployment.yaml: mounts the restic-credentials secret into Prometheus at /etc/prometheus/secrets/restic
Updated config.yaml: adds HTTPS + basic_auth to the restic_backups scrape job using the mounted secret files; removes dead kea scrape job
kustomization.yaml
Adds kube-state-metrics.yaml and restic-secret.yaml to the resource list
Network: removes dead Kea panel, adds WiFi/Wired client counts, WAN RX/TX timeseries, top client throughput, device status table
Opened by Klaatu 🌌
## Changes
### kube-state-metrics
- New `kube-state-metrics.yaml`: Deployment, Service, and ServiceAccount for kube-state-metrics v2.15.0
- Bound to the existing `kube-state-metrics` ClusterRole already in `cluster-role.yaml`
- Runs as non-root (uid 65534) with read-only filesystem
### Restic ExternalSecret
- New `restic-secret.yaml`: ExternalSecret pulling username/password from Bitwarden item `cb04cb1b-1037-40d6-a187-b375015e7ef6` via `bitwarden-login` ClusterSecretStore
- Updated `deployment.yaml`: mounts the `restic-credentials` secret into Prometheus at `/etc/prometheus/secrets/restic`
- Updated `config.yaml`: adds HTTPS + basic_auth to the `restic_backups` scrape job using the mounted secret files; removes dead `kea` scrape job
### kustomization.yaml
- Adds `kube-state-metrics.yaml` and `restic-secret.yaml` to the resource list
### Grafana dashboards (hosea/default.nix)
- **Kubernetes**: fixes `kube_pod_status_phase == 1` syntax, adds Nodes Ready stat, container CPU/memory panels (cadvisor), Deployments table
- **Network**: removes dead Kea panel, adds WiFi/Wired client counts, WAN RX/TX timeseries, top client throughput, device status table
> Opened by Klaatu 🌌
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
greg
Changes
kube-state-metrics
kube-state-metrics.yaml: Deployment, Service, and ServiceAccount for kube-state-metrics v2.15.0kube-state-metricsClusterRole already incluster-role.yamlRestic ExternalSecret
restic-secret.yaml: ExternalSecret pulling username/password from Bitwarden itemcb04cb1b-1037-40d6-a187-b375015e7ef6viabitwarden-loginClusterSecretStoredeployment.yaml: mounts therestic-credentialssecret into Prometheus at/etc/prometheus/secrets/resticconfig.yaml: adds HTTPS + basic_auth to therestic_backupsscrape job using the mounted secret files; removes deadkeascrape jobkustomization.yaml
kube-state-metrics.yamlandrestic-secret.yamlto the resource listGrafana dashboards (hosea/default.nix)
kube_pod_status_phase == 1syntax, adds Nodes Ready stat, container CPU/memory panels (cadvisor), Deployments table44f40b8b21to45536f4a8d