Application Monitoring Operator (AMO) example CRs

alertmanager.cr.yml

apiVersion: monitoring.coreos.com/v1
kind: Alertmanager
metadata:
  name: application-monitoring
  namespace: redhat-rhmi-middleware-monitoring-operator
spec:
  baseImage: quay.io/openshift/origin-prometheus-alertmanager
  containers:
  - args:
    - -provider=openshift
    - -https-address=:9091
    - -http-address=
    - -email-domain=*
    - -upstream=http://localhost:9093
    - '-openshift-sar={"resource": "namespaces", "verb": "get"}'
    - '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb": "get"}}'
    - -tls-cert=/etc/tls/private/tls.crt
    - -tls-key=/etc/tls/private/tls.key
    - -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token
    - -cookie-secret-file=/etc/proxy/secrets/session_secret
    - -openshift-service-account=alertmanager-service-account
    - -openshift-ca=/etc/pki/tls/cert.pem
    - -openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
    - -skip-auth-regex=^/metrics
    env:
    - name: HTTP_PROXY
    - name: HTTPS_PROXY
    - name: NO_PROXY
    image: quay.io/openshift/origin-oauth-proxy:4.2
    name: alertmanager-proxy
    ports:
    - containerPort: 9091
      name: oproxy
    resources: {}
    volumeMounts:
    - mountPath: /etc/tls/private
      name: secret-alertmanager-k8s-tls
    - mountPath: /etc/proxy/secrets
      name: secret-alertmanager-k8s-proxy
  externalUrl: https://alertmanager-route-redhat-rhmi-middleware-monitoring-operator.apps.rlawton.z5p2.s1.devshift.org
  listenLocal: true
  secrets:
  - alertmanager-k8s-tls
  - alertmanager-k8s-proxy
  serviceAccountName: alertmanager-service-account
  tag: "4.2"

grafana.cr.yml

apiVersion: integreatly.org/v1alpha1
kind: Grafana
metadata:
  name: grafana
  namespace: redhat-rhmi-middleware-monitoring-operator
spec:
  client:
    preferService: true
  compat:
    fixAnnotations: true
  config:
    auth:
      disable_login_form: false
      disable_signout_menu: true
    auth.anonymous:
      enabled: true
    auth.basic:
      enabled: true
    log:
      level: warn
      mode: console
  containers:
  - args:
    - -provider=openshift
    - -pass-basic-auth=false
    - -https-address=:9091
    - -http-address=
    - -email-domain=*
    - -upstream=http://localhost:3000
    - '-openshift-sar={"resource": "namespaces", "verb": "get"}'
    - '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb": "get"}}'
    - -tls-cert=/etc/tls/private/tls.crt
    - -tls-key=/etc/tls/private/tls.key
    - -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token
    - -cookie-secret-file=/etc/proxy/secrets/session_secret
    - -openshift-service-account=grafana-serviceaccount
    - -openshift-ca=/etc/pki/tls/cert.pem
    - -openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
    - -skip-auth-regex=^/metrics
    image: quay.io/openshift/origin-oauth-proxy:4.2
    name: grafana-proxy
    ports:
    - containerPort: 9091
      name: grafana-proxy
    resources: {}
    volumeMounts:
    - mountPath: /etc/tls/private
      name: secret-grafana-k8s-tls
      readOnly: false
    - mountPath: /etc/proxy/secrets
      name: secret-grafana-k8s-proxy
      readOnly: false
  dashboardLabelSelector:
  - matchExpressions:
    - key: monitoring-key
      operator: In
      values:
      - middleware
  - matchLabels:
      app: syndesis
  ingress:
    enabled: true
    targetPort: grafana-proxy
    termination: reencrypt
  secrets:
  - grafana-k8s-tls
  - grafana-k8s-proxy
  service:
    annotations:
      service.alpha.openshift.io/serving-cert-secret-name: grafana-k8s-tls
    ports:
    - name: grafana-proxy
      port: 9091
      protocol: TCP
      targetPort: grafana-proxy
  serviceAccount:
    annotations:
      serviceaccounts.openshift.io/oauth-redirectreference.primary: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"grafana-route"}}'

prometheus.cr.yml

apiVersion: monitoring.coreos.com/v1
kind: Prometheus
metadata:
  labels:
    prometheus: application-monitoring
  name: application-monitoring
  namespace: redhat-rhmi-middleware-monitoring-operator
spec:
  additionalScrapeConfigs:
    key: integreatly.yaml
    name: additional-scrape-configs
  alerting:
    alertmanagers:
    - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
      name: alertmanager-service
      namespace: redhat-rhmi-middleware-monitoring-operator
      port: web
      scheme: https
      tlsConfig:
        caFile: /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
        serverName: alertmanager-service.redhat-rhmi-middleware-monitoring-operator.svc
  baseImage: quay.io/openshift/origin-prometheus
  configMaps:
  - blackbox-exporter-config
  containers:
  - args:
    - --config.file=/etc/blackbox-config/blackbox.yml
    image: quay.io/prometheus/blackbox-exporter:v0.14.0
    name: blackbox-exporter
    ports:
    - containerPort: 9115
      name: blackbox
    volumeMounts:
    - mountPath: /etc/blackbox-config
      name: configmap-blackbox-exporter-config
    - mountPath: /etc/tls/private
      name: secret-prometheus-k8s-tls
  - args:
    - -provider=openshift
    - -https-address=:9091
    - -http-address=
    - -email-domain=*
    - -upstream=http://localhost:9090
    - -openshift-service-account=prometheus-service-account
    - '-openshift-sar={"resource": "namespaces", "verb": "get"}'
    - '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb":"get"}}'
    - -tls-cert=/etc/tls/private/tls.crt
    - -tls-key=/etc/tls/private/tls.key
    - -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token
    - -cookie-secret-file=/etc/proxy/secrets/session_secret
    - -openshift-ca=/etc/pki/tls/cert.pem
    - -openshift-ca=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
    - -skip-auth-regex=^/metrics
    image: quay.io/openshift/origin-oauth-proxy:4.2
    name: prometheus-proxy
    ports:
    - containerPort: 9091
      name: oproxy
    resources: {}
    volumeMounts:
    - mountPath: /etc/tls/private
      name: secret-prometheus-k8s-tls
    - mountPath: /etc/proxy/secrets
      name: secret-prometheus-k8s-proxy
  externalUrl: https://prometheus-route-redhat-rhmi-middleware-monitoring-operator.apps.rlawton.z5p2.s1.devshift.org
  podMonitorNamespaceSelector:
    matchExpressions:
    - key: monitoring-key
      operator: In
      values:
      - middleware
  podMonitorSelector:
    any: true
  resources:
    requests:
      memory: 400Mi
  retention: 45d
  ruleNamespaceSelector:
    matchExpressions:
    - key: monitoring-key
      operator: In
      values:
      - middleware
  ruleSelector:
    any: true
  secrets:
  - prometheus-k8s-tls
  - prometheus-k8s-proxy
  serviceAccountName: prometheus-service-account
  serviceMonitorNamespaceSelector:
    matchExpressions:
    - key: monitoring-key
      operator: In
      values:
      - middleware
  serviceMonitorSelector:
    any: true
  storage:
    volumeClaimTemplate:
      spec:
        resources:
          requests:
            storage: 50Gi
  tag: "4.2"