Add VictoriaMetrics observability stack + sync catalog for monitoring test
- VM stack 10 charts: victoria-metrics-cluster/auth, victoria-logs-cluster, victoria-metrics-agent/alert, opentelemetry-collector, kube-state-metrics, prometheus-node-exporter, alertmanager, perses (JWT/OIDC, Infisical-ready) - ArgoCD ApplicationSet (syncWave) + per-chart dip-values overlays - doc/victoria-metrics-architecture.md, define-chart-resources updates - includes pending working-tree changes (mlflow, kubeflow, apisix, CLAUDE.md) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,34 @@
|
||||
# 환경 오버레이 — perses/0.21.0/custom-values.yaml 위에 적용
|
||||
# 환경별: OIDC issuer/redirect_uri, ingress(베이스에 없음 → 추가), client_secret(Infisical).
|
||||
# dip-console이 $VAR를 Infisical/환경값으로 렌더해 값 repo에 커밋한다.
|
||||
# (Helm 배열 교체: config.security.authentication.providers.oidc 전체 재정의)
|
||||
|
||||
config:
|
||||
security:
|
||||
enable_auth: true
|
||||
authentication:
|
||||
providers:
|
||||
oidc:
|
||||
- slug_id: keycloak
|
||||
name: Keycloak
|
||||
client_id: perses
|
||||
client_secret: "$INFISICAL_PERSES_CLIENT_SECRET" # Infisical 출처(평문 커밋 금지)
|
||||
issuer: "$KEYCLOAK_URL/realms/$KEYCLOAK_REALM"
|
||||
redirect_uri: "https://perses.$DOMAIN/api/auth/providers/oidc/keycloak/callback"
|
||||
scopes: [openid, profile, email]
|
||||
|
||||
# 외부 노출 (베이스 custom-values엔 ingress 없음)
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: "apisix"
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: "root-ca-issuer"
|
||||
hosts:
|
||||
- host: "perses.$DOMAIN"
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
- secretName: perses-tls
|
||||
hosts:
|
||||
- "perses.$DOMAIN"
|
||||
Reference in New Issue
Block a user