feat: add prometheus role

2026-07-05 22:19:07 +01:00
parent 81bf536ac3
commit 1efa0f9426
2 changed files with 76 additions and 0 deletions
@@ -0,0 +1,25 @@
+- name: Ensure Grafana OIDC secret exists
+  kubernetes.core.k8s:
+    state: present
+    definition:
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: grafana-oidc-secret
+        namespace: monitoring
+      type: Opaque
+      stringData:
+        GRAFANA_OIDC_CLIENT_ID: "{{ lookup('proton_pass', item_title='Grafana OIDC', vault_name='Home Lab', field='Client ID') }}"
+        GRAFANA_OIDC_CLIENT_SECRET: "{{ lookup('proton_pass', item_title='Grafana OIDC', vault_name='Home Lab', field='Client secret') }}"
+  no_log: true
+  run_once: true
+
+- name: Ensure kube-prometheus-stack is installed
+  kubernetes.core.helm:
+    release_name: prometheus
+    release_namespace: monitoring
+    chart_ref: oci://ghcr.io/prometheus-community/charts/kube-prometheus-stack
+    chart_version: "{{ prometheus_chart_version }}"
+    create_namespace: true
+    values: "{{ prometheus_values }}"
+  run_once: true