initial: yandex-prod gitops infrastructure

Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space

argocd/apps/monitoring.yaml

@@ -10,6 +10,13 @@ metadata:
 spec:
   project: default
   sources:
+    - repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
+      targetRevision: master
+      path: manifests/metrics/grafana
+      directory:
+        recurse: true
+        include: "*.yaml"
+
     - repoURL: https://victoriametrics.github.io/helm-charts/
       chart: victoria-metrics-k8s-stack
       targetRevision: ">=0.30.0"
@@ -18,6 +25,19 @@ spec:
           fullnameOverride: vm-k8s-stack
           namespaceOverride: metrics
 
+          victoria-metrics-operator:
+            resources:
+              requests:
+                memory: 128Mi
+                cpu: 25m
+              limits:
+                memory: 256Mi
+
+          defaultDashboards:
+            dashboards:
+              node-exporter-full:
+                enabled: false
+
           vmsingle:
             enabled: true
             spec:
@@ -101,19 +121,22 @@ spec:
           kubeEtcd:
             enabled: false
 
-    - repoURL: http://gitea.gitea.svc.cluster.local:3000/gitea/yandex-prod.git
-      targetRevision: main
-      path: manifests/metrics/grafana
-      directory:
-        recurse: true
-        include: "*.yaml"
-
   destination:
     server: https://kubernetes.default.svc
-    namespace: argocd
+    namespace: metrics
+  ignoreDifferences:
+    - group: operator.victoriametrics.com
+      kind: VMAlertmanager
+      jsonPointers:
+        - /spec/config
+    - kind: Secret
+      name: monitoring-victoria-metrics-operator-validation
+      jsonPointers:
+        - /data
+    - kind: ValidatingWebhookConfiguration
+      name: monitoring-victoria-metrics-operator-admission
+      jsonPointers:
+        - /webhooks/0/clientConfig/caBundle
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true