temporarily allow mimir alertmanager on amd64 nodes

cedi-dev · Sep 22, 2024 · ac54874 · ac54874
1 parent 1e4bdea
commit ac54874
Show file tree

Hide file tree

Showing 3 changed files with 64 additions and 59 deletions.
diff --git a/.sops.yaml b/.sops.yaml
@@ -2,7 +2,7 @@ creation_rules:
   - path_regex: charts\/.*\/.*secret\.yaml
     age: "age1r9chn8pl3d4msxktw457x3xz2l8p04pwuyd7pkgldkmkakras5ks7tfsyq,age10hzpv26wext204acftvf2n8r6hmnnwxdpkngzaysllpwynccjvjsjvhq4z,age1l4lhmkmvr4lype9x4dm3y9lxk2uekqwwj65mp4c36tnph6ytfakqesnats"
   - path_regex: kustomize\/.*\/.*secret\.yaml
-    encrypted_regex: "^(data|stringData|spec|bot_token|chat_id)$"
+    encrypted_regex: "^(data|stringData|spec|bot_token|chat_id|url)$"
     age: "age1r9chn8pl3d4msxktw457x3xz2l8p04pwuyd7pkgldkmkakras5ks7tfsyq,age10hzpv26wext204acftvf2n8r6hmnnwxdpkngzaysllpwynccjvjsjvhq4z,age1l4lhmkmvr4lype9x4dm3y9lxk2uekqwwj65mp4c36tnph6ytfakqesnats"
   - path_regex: manifests\/.*\/.*secret\.yaml
     encrypted_regex: "^(data|stringData|spec)$"

diff --git a/kustomize/bases/grafana-mimir/helm-values.yaml b/kustomize/bases/grafana-mimir/helm-values.yaml
@@ -176,7 +176,12 @@ alertmanager:
   statefulSet:
     enabled: true
 
-  topologySpreadConstraints: {}
+  # temporarily allow to run on amd64 due to resource constraints
+  tolerations:
+    - key: "arch"
+      operator: "Equal"
+      value: "amd64"
+      effect: "NoSchedule"
 
 compactor:
   replicas: 3

diff --git a/kustomize/overlays/grafana-mimir/alertmanager.secret.yaml b/kustomize/overlays/grafana-mimir/alertmanager.secret.yaml
@@ -1,61 +1,61 @@
 global:
-    resolve_timeout: 5m
+  resolve_timeout: 5m
 receivers:
-    - name: blackhole
-    - name: grafana_oncall
-      webhook_configs:
-        - url: https://oncall.grafana.cedi.dev/integrations/v1/alertmanager/g5ED7CD0gLssJbqZ4w3fc1L3O/
-          send_resolved: true
+  - name: blackhole
+  - name: grafana_oncall
+    webhook_configs:
+      - url: ENC[AES256_GCM,data:pyGQs1iBpFpJH5al999oe4G2bLogq+WByvG3OqbyDkoSUis/jeHbEIcnZEYu63EJ5+aZjSl3Ncrn0R5+eETsudS8qgs+qe8wbX1vBVq0gwAULWUVRzV0,iv:un6hPKcPap0a0U4CIDOnUWjC/0a9Knki/GNsM92Nq14=,tag:Q9nPf8FJR2GezXinQAaahg==,type:str]
+        send_resolved: true
 route:
-    group_by:
-        - alertname
-        - job
-    group_interval: 5m
-    group_wait: 30s
-    receiver: grafana_oncall
-    repeat_interval: 12h
-    routes:
-        - match:
-            alertname: Watchdog
-          receiver: blackhole
-        - match:
-            alertname: etcdHighNumberOfFailedGRPCRequests
-          receiver: blackhole
+  group_by:
+    - alertname
+    - job
+  group_interval: 5m
+  group_wait: 30s
+  receiver: grafana_oncall
+  repeat_interval: 12h
+  routes:
+    - match:
+        alertname: Watchdog
+      receiver: blackhole
+    - match:
+        alertname: etcdHighNumberOfFailedGRPCRequests
+      receiver: blackhole
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1r9chn8pl3d4msxktw457x3xz2l8p04pwuyd7pkgldkmkakras5ks7tfsyq
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoZXBoVGhDc0tqR1A3OWk0
-            RGlCQkdvVnRKdGg2d0tHK2V6dHlJSE96MEdrCjczZTZWVHpNLzQ2am12akVDa2Ry
-            alR0VnVkSVFjcHdnSUJSeUZ2MzFrVUEKLS0tIHFVc2pwWmhmaktuQ1JrNjZrMWhR
-            cERJQUQvZzI5RDJ6MlFNeEd1RWRHWkEK4sV0kgWIk7pfSpAsE6zHPdtW9O4tSUAN
-            7XWW9txP+Y+igR65V3cfxBxoNvavFy4yC6qUXiIsYxaHGi8yiIKRkQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age10hzpv26wext204acftvf2n8r6hmnnwxdpkngzaysllpwynccjvjsjvhq4z
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNG9IQlhXUTFHcWVRcHY1
-            MkNpc2l2TGdlUk41OE5POXk0WmJ5dG03WGtzCjZKTzJZQVdSS2U4cGpNcFBYOHp6
-            cjA1VXhxUkFXbElxVys3V2wwYmRnTzAKLS0tIDg1UDJFRGRoVHNVVjZkQkNpQWZw
-            Y2I1ZkU3eS9lWUcvL2hSZDI3Mk5xeWsKWK8Ms/i3MC4CpTcSS/mtu5m6EBspiXiS
-            UVrTVGH5ajn+qxFHeg3wzXtlX28v80JzXyaC6PtiuZG7je3mXku1nA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1l4lhmkmvr4lype9x4dm3y9lxk2uekqwwj65mp4c36tnph6ytfakqesnats
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUQitmUFFMcC9IT1dmR1hO
-            cGk0YkZJZ0NEY2VFWHBtQU5mZ2UyZWZaVnl3CkdLYzRxR3VsL2M3TEljVG1NdkM1
-            NlovS29DVm1vVTNxeE5ZOHk3b3Z5Y3MKLS0tIElMR0FEa1V6SnBTeGZJazNxbFhY
-            ZStVelk2RjVDbSttenN5SENKUlFZQmsK9r5zc6ltSk8B2+QVeysH45c+PQDdlyVC
-            681Pn6W+jkr84kFbtkYi4gwiWQ1k7rEryB7CERVzsjMwlcM/qppnNg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-05T14:51:05Z"
-    mac: ENC[AES256_GCM,data:WKYNL1cUr+qgMUgoafm85pDbejJfuCUUhuO5XsqT9o3FfXBPY6QhbiuI+e1EBxJR+5MxQtwvBEIUcyQEu9E8+JKWxE3LzwhxPhgtJ/3WPO1YVBBrIDVwO5CHuVGojmE5RisLaPq0XsrQL28tOsE1TgnQA4queQqeab7vxngQI6U=,iv:1bSR6OT09StwaqMVHYLS9Pd5tJz4l/gAUYUAe/uLt3o=,tag:xnJSD6pUe2SRp7684Ne/oQ==,type:str]
-    pgp: []
-    encrypted_regex: ^(data|stringData|spec|bot_token|chat_id)$
-    version: 3.7.2
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1r9chn8pl3d4msxktw457x3xz2l8p04pwuyd7pkgldkmkakras5ks7tfsyq
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0NlRiSDBEazdZa2FkUy9C
+        LzE2TThEME5zTVlTK2VTdFJqZUIzZml3V2hFCjQ4a2VqWnFiekExL2dQd0VzeUMy
+        V0lubE16VkFWd0hVYlVaMS91Q3pjTWsKLS0tIE5idG03N2pPSkFjZmJvZldlcm1I
+        OVlnUkhaTUl4cHpabFFKOXZUd0lwRGMKj6WkHGnpTFUe3Iznk/UHkElIz1zwMtRw
+        doxopgYTbUt4lOaPnr71lsRBaeWxTCDGYrzqGEig64nI5stKfd/wCg==
+        -----END AGE ENCRYPTED FILE-----
+    - recipient: age10hzpv26wext204acftvf2n8r6hmnnwxdpkngzaysllpwynccjvjsjvhq4z
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMnpxb01sR2RMYnlpMTZv
+        VTIrbC9YdDBQeHVrWnNqbGVmQlZHeE5IOEJRCjI0LzdTeE5ZVjhCRzRoOUU2SXNo
+        R1I5ejlpdWNnNjRaRnFUTC9FMkgrUGcKLS0tICtMVCtWWkkycEZVNDJackhwWHlE
+        RnFhQ0xjNTF1SHN2dFJlaisvN0Y4dE0Kq7MgZR8LMHfP8aFHMcWlLgcSvEjtW4Cv
+        DyiF0l7DGUJbv7xLciUkub6WXKmTHJNBiT2LCvAcd86bQ74YV2R7bg==
+        -----END AGE ENCRYPTED FILE-----
+    - recipient: age1l4lhmkmvr4lype9x4dm3y9lxk2uekqwwj65mp4c36tnph6ytfakqesnats
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3VHlheGpDREI1MjNlTzA1
+        U3hTeEsrQXJjSXhhc2NqNDBTWkxVZTQvZ21FCllhSkdINVQwdUhPVWcyVVJteFlL
+        Y0dmUFJPWGJDMXlHdnpFS1VzUEVYM00KLS0tIFg5cmt2aTdkU2NxMHhYK1phZEp0
+        ckE2MGNsZFlwSkQ4TGFaWis3eStZbUEK3+ZuL7Gt7UjDZssHfxChBPqLvjmB57dU
+        WXigTTQPE0x0D7qbEvAEXT8hjBAAlEO2iQ6kRIrg4CKOc4+Z4CZz1g==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-22T13:23:55Z"
+  mac: ENC[AES256_GCM,data:QMaOMzRDcK3tpqYe91AoNLLlUCfLnC1V2t3eZ9Dr+Ut3sTnHy9e1yA2BDSayNXCJTUHGilVhRiwWki4lkr+EDMaJMmENA3mK4qsu+qaS2/LaUNfpCoaYWH3qb64++zcDyk3gua2iKuG1vBXTWOoKUNzixWYQNZIfm9CUoE3vTSE=,iv:RLm4RM6LlmVi0iol7FvXDyxib05XGyqa6wRQOvRPdys=,tag:SDbVhPSsDjU1VyXMeoE0rw==,type:str]
+  pgp: []
+  encrypted_regex: ^(data|stringData|spec|bot_token|chat_id|url)$
+  version: 3.8.1