root
df2f9d69fe
buildbot/nix-eval Build done. (1 warning)
- Replace unpoller-credentials plain Secret with ExternalSecret pulling from Bitwarden item 15bfc957-5de5-49b2-ab6c-b41800e71564 via bitwarden-login ClusterSecretStore (username + password) - Pull UP_UNIFI_DEFAULT_USER from secret as well (was hardcoded) - Add OpenWRT access point (10.42.0.3) to genesis DNS hosts file as ap.thehellings.lan (discovered during network scan) - Add blackbox exporter to genesis (port 9115, ICMP module) for probing non-NixOS infrastructure that has no node_exporter: OpenWRT AP, Joel, pve1, chronicles, nas1, odoo, mattermost, homeassistant, USW-Pro-HD-24 UniFi switch - Add infra_ping scrape job to Prometheus using blackbox prober targeting all non-NixOS LAN hosts via genesis blackbox exporter
85 lines
1.9 KiB
YAML
85 lines
1.9 KiB
YAML
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: unpoller-credentials
|
|
spec:
|
|
target:
|
|
name: unpoller-credentials
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
username: "{{ .username }}"
|
|
password: "{{ .password }}"
|
|
secretStoreRef:
|
|
name: bitwarden-login
|
|
kind: ClusterSecretStore
|
|
data:
|
|
- secretKey: username
|
|
remoteRef:
|
|
key: "15bfc957-5de5-49b2-ab6c-b41800e71564"
|
|
property: username
|
|
- secretKey: password
|
|
remoteRef:
|
|
key: "15bfc957-5de5-49b2-ab6c-b41800e71564"
|
|
property: password
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: unpoller
|
|
namespace: monitoring
|
|
labels:
|
|
app: unpoller
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: unpoller
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: unpoller
|
|
spec:
|
|
containers:
|
|
- name: unpoller
|
|
image: ghcr.io/unpoller/unpoller:latest
|
|
ports:
|
|
- name: metrics
|
|
containerPort: 9130
|
|
env:
|
|
- name: UP_UNIFI_DEFAULT_URL
|
|
value: "https://10.42.1.1:8443"
|
|
- name: UP_UNIFI_DEFAULT_VERIFY_SSL
|
|
value: "false"
|
|
- name: UP_UNIFI_DEFAULT_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: unpoller-credentials
|
|
key: username
|
|
- name: UP_UNIFI_DEFAULT_PASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: unpoller-credentials
|
|
key: password
|
|
- name: UP_PROMETHEUS_DISABLE
|
|
value: "false"
|
|
- name: UP_INFLUXDB_DISABLE
|
|
value: "true"
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: unpoller
|
|
namespace: monitoring
|
|
labels:
|
|
app: unpoller
|
|
spec:
|
|
selector:
|
|
app: unpoller
|
|
ports:
|
|
- name: metrics
|
|
port: 9130
|
|
targetPort: 9130
|