feat(observability): OneLab-only Promtail, provisioned OneLab logs dashboard

- Promtail: keep kubernetes-pods in namespace onelab; tag host file logs (host-logs)
- Grafana: enable dashboard sidecar; ConfigMap onelab-logs.json
- Dashboard: stats (total/error/warn heuristics), logs panel, component + regex filters

Made-with: Cursor

gitops/observability/values.yaml

@@ -69,6 +69,12 @@ promtail:
     clients:
       - url: http://{{ .Release.Name }}-loki-gateway.{{ .Release.Namespace }}.svc.cluster.local/loki/api/v1/push
     snippets:
+      # Only ingest pod logs from namespace onelab (Explore / Loki stay focused on OneLab).
+      extraRelabelConfigs:
+        - action: keep
+          source_labels:
+            - __meta_kubernetes_namespace
+          regex: onelab
       extraScrapeConfigs: |
         - job_name: onelab-host-log-files
           static_configs:
@@ -76,6 +82,8 @@ promtail:
                 - localhost
               labels:
                 job: onelab-files
+                namespace: onelab
+                component: host-logs
                 __path__: /onelab-host-logs/**/*
   extraVolumes:
     - name: onelab-host-logs
@@ -101,6 +109,17 @@ grafanaOnelabIngress:
 grafana:
   adminUser: admin
   adminPassword: changeme
+  # Load dashboards from ConfigMaps labeled grafana_dashboard (see templates/configmap-dashboard-onelab-logs.yaml).
+  sidecar:
+    dashboards:
+      enabled: true
+      label: grafana_dashboard
+      folder: /tmp/dashboards
+      provider:
+        foldersFromFilesStructure: false
+        allowUiUpdates: true
+    datasources:
+      enabled: false
   persistence:
     enabled: true
     size: 2Gi