policy exception

gistfile1.txt

apiVersion: kyverno.io/v2
kind: PolicyException
metadata:
  name: toleration-exceptions
  namespace: kube-system
spec:
  background: true
  match:
    any:
    - kinds:
        - Pod
        - Deployment
      names:
        - kube-system
  exceptions:
    - policyName: all-pods-need-tolerations
      ruleNames:
        - check-pod-tolerations

pip install --upgrade cryptography --platform manylinux2014_x86_64 --only-binary=:all: -t .

kube-prometheus-stack:
  alertmanager:
    ingress:
      enabled: true

      ingressClassName: internal

      hosts:
      - k8s1-am-alertmanager.indexexchange.com

      paths:
      - /

      pathType: Prefix

  grafana:
    enabled: true

    ingress:
      enabled: true

      ingressClassName: internal

      hosts:
      - k8s1-am-grafana.indexexchange.com

      ## Path for grafana ingress
      path: /

  kubeEtcd:
    ## If your etcd is not deployed as a pod, specify IPs it can be found on
    ##
    endpoints:
    - 10.129.5.1
    - 10.129.5.2
    - 10.129.5.3

  prometheus:
    ingress:
      enabled: true

      ingressClassName: internal

      hosts:
      - k8s1-am-prometheus.indexexchange.com

      paths:
      - /

      pathType: Prefix

    prometheusSpec:
      externalLabels:
        cluster: k8s1-am

- apiVersion: monitoring.coreos.com/v1
  kind: ServiceMonitor
  metadata:
    labels:
      argocd.argoproj.io/instance: data-systems-airflow-dev
      mimir_matcher: datasystems-dev-airflow
      prom: local
    name: data-systems-airflow-dev-statsd-monitor
    namespace: data-systems-airflow-dev
  spec:
    endpoints:
    - interval: 10s
      metricRelabelings:
      - action: replace
        replacement: datasystems
        targetLabel: team
      - action: replace
        replacement: dev
        targetLabel: env
      - action: replace
        replacement: airflow
        targetLabel: group
      path: /metrics
      port: statsd-scrape
    namespaceSelector:
      matchNames:
      - data-systems-airflow-dev
    selector:
      matchLabels:
        component: statsd
        env: dev
        team: datasystems
        tier: airflow