gitops: public-safe values, docs; remove legacy app/resources

- Sanitize placeholders, centralize values under gitops/values/ - Argo Application placeholder repoURL; env-example + observability.yaml - Remove Swarm app/, resources/, install.sh; add root README Made-with: Cursor
2026-03-20 12:25:01 +01:00
parent 3e5dfaa1cb
commit 5e120c4d74
87 changed files with 397 additions and 3263 deletions
--- a/gitops/observability/values.yaml
+++ b/gitops/observability/values.yaml
@@ -1,149 +1,3 @@
-# Umbrella chart: Loki (SingleBinary + filesystem) + Promtail + Grafana.
-# Keep hostPath below in sync with persistence.hostPath.logs in gitops/values/k3s-example.yaml.
-
-loki:
-  deploymentMode: SingleBinary
-  loki:
-    auth_enabled: false
-    commonConfig:
-      replication_factor: 1
-    storage:
-      type: filesystem
-    schemaConfig:
-      configs:
-        - from: "2024-04-01"
-          store: tsdb
-          object_store: filesystem
-          schema: v13
-          index:
-            prefix: loki_index_
-            period: 24h
-    limits_config:
-      retention_period: 168h
-      ingestion_rate_mb: 16
-      ingestion_burst_size_mb: 32
-  singleBinary:
-    replicas: 1
-    persistence:
-      enabled: true
-      size: 10Gi
-  backend:
-    replicas: 0
-  read:
-    replicas: 0
-  write:
-    replicas: 0
-  ingester:
-    replicas: 0
-  querier:
-    replicas: 0
-  queryFrontend:
-    replicas: 0
-  queryScheduler:
-    replicas: 0
-  distributor:
-    replicas: 0
-  compactor:
-    replicas: 0
-  indexGateway:
-    replicas: 0
-  bloomCompactor:
-    replicas: 0
-  bloomGateway:
-    replicas: 0
-  ruler:
-    replicas: 0
-  minio:
-    enabled: false
-  lokiCanary:
-    enabled: false
-  test:
-    enabled: false
-  chunksCache:
-    enabled: false
-  resultsCache:
-    enabled: false
-
-promtail:
-  config:
-    clients:
-      - url: http://{{ .Release.Name }}-loki-gateway.{{ .Release.Namespace }}.svc.cluster.local/loki/api/v1/push
-    snippets:
-      # Only ingest pod logs from namespace onelab (Explore / Loki stay focused on OneLab).
-      extraRelabelConfigs:
-        - action: keep
-          source_labels:
-            - __meta_kubernetes_namespace
-          regex: onelab
-      extraScrapeConfigs: |
-        - job_name: onelab-host-log-files
-          static_configs:
-            - targets:
-                - localhost
-              labels:
-                job: onelab-files
-                namespace: onelab
-                component: host-logs
-                __path__: /onelab-host-logs/**/*
-  extraVolumes:
-    - name: onelab-host-logs
-      hostPath:
-        path: /opt/onelab/logs
-        type: DirectoryOrCreate
-  extraVolumeMounts:
-    - name: onelab-host-logs
-      mountPath: /onelab-host-logs
-      readOnly: true
-
-# Named Ingress grafana-onelab (templates/ingress-grafana-onelab.yaml). Grafana subchart ingress is disabled.
-grafanaOnelabIngress:
-  enabled: true
-  className: traefik
-  host: grafana.k8s.selair.it
-  tls: true
-  tlsSecretName: grafana-tls-k8s-selair
-  clusterIssuer: letsencrypt-prod
-  servicePort: 80
-  annotations: {}
-
-grafana:
-  adminUser: admin
-  adminPassword: changeme
-  # Root+CHOWN init breaks under Pod Security / restricted policies (k3s). fsGroup:472 on the pod is enough for most PVCs.
-  initChownData:
-    enabled: false
-  # Load dashboards from ConfigMaps labeled grafana_dashboard (see templates/configmap-dashboard-onelab-logs.yaml).
-  sidecar:
-    dashboards:
-      enabled: true
-      label: grafana_dashboard
-      folder: /tmp/dashboards
-      provider:
-        foldersFromFilesStructure: false
-        allowUiUpdates: true
-    datasources:
-      enabled: false
-  persistence:
-    enabled: true
-    size: 2Gi
-  service:
-    type: ClusterIP
-  # Required when served behind Ingress (redirects, OAuth callbacks).
-  grafana.ini:
-    server:
-      domain: grafana.k8s.selair.it
-      root_url: https://grafana.k8s.selair.it/
-  ingress:
-    enabled: false
-  datasources:
-    datasources.yaml:
-      apiVersion: 1
-      datasources:
-        - name: Loki
-          type: loki
-          uid: loki
-          url: http://{{ .Release.Name }}-loki-gateway.{{ .Release.Namespace }}.svc.cluster.local
-          access: proxy
-          isDefault: true
-          jsonData:
-            maxLines: 1000
+# Operator-facing overrides live in gitops/values/observability.yaml (see gitops/argocd/application.yaml helm.valueFiles).
+# This file is kept minimal on purpose.
+{}