feat(o11y): collect Postgres metrics from staging, and prod

Referenced `Secret`s have not been committed, because we don't yet use a secret encryption tool like `sops`, or `git-crypt`. Signed-off-by: Siddhesh Mhadnak <[email protected]>
vipyrsec · Aug 31, 2024 · f305719 · f305719
1 parent e4f6d7b
commit f305719
Show file tree

Hide file tree

Showing 3 changed files with 56 additions and 0 deletions.
diff --git a/kubernetes/chart/values/o11y/vipyrsec.yaml b/kubernetes/chart/values/o11y/vipyrsec.yaml
@@ -80,6 +80,24 @@ alloy:
 
         prometheus.exporter.cadvisor "local" { }
 
+        remote.kubernetes.secret "postgres_staging" {
+        	namespace = "postgres"
+        	name      = "staging"
+        }
+
+        prometheus.exporter.postgres "staging" {
+        	data_source_names = [remote.kubernetes.secret.postgres_staging.data.dsn]
+        }
+
+        remote.kubernetes.secret "postgres_prod" {
+        	namespace = "postgres"
+        	name      = "prod"
+        }
+
+        prometheus.exporter.postgres "prod" {
+        	data_source_names = [remote.kubernetes.secret.postgres_prod.data.dsn]
+        }
+
         prometheus.scrape "self" {
         	targets    = prometheus.exporter.self.local.targets
         	forward_to = [prometheus.relabel.tagged.receiver]
@@ -100,6 +118,16 @@ alloy:
         	forward_to = [prometheus.relabel.tagged.receiver]
         }
 
+        prometheus.scrape "postgres_staging" {
+        	targets    = prometheus.exporter.postgres.staging.targets
+        	forward_to = [prometheus.relabel.tagged_staging.receiver]
+        }
+
+        prometheus.scrape "postgres_prod" {
+        	targets    = prometheus.exporter.postgres.prod.targets
+        	forward_to = [prometheus.relabel.tagged_prod.receiver]
+        }
+
         prometheus.relabel "tagged" {
         	rule {
         		source_labels = ["__address__"]
@@ -111,6 +139,28 @@ alloy:
         	forward_to = [prometheus.remote_write.o11y.receiver]
         }
 
+        prometheus.relabel "tagged_staging" {
+        	rule {
+        		source_labels = ["__address__"]
+        		regex         = ".*"
+        		replacement   = "staging"
+        		target_label  = "cluster"
+        	}
+
+        	forward_to = [prometheus.remote_write.o11y.receiver]
+        }
+
+        prometheus.relabel "tagged_prod" {
+        	rule {
+        		source_labels = ["__address__"]
+        		regex         = ".*"
+        		replacement   = "prod"
+        		target_label  = "cluster"
+        	}
+
+        	forward_to = [prometheus.remote_write.o11y.receiver]
+        }
+
         prometheus.remote_write "o11y" {
         	endpoint {
         		url = "http://prometheus.prometheus.svc.cluster.local:9090/api/v1/write"

diff --git a/kubernetes/manifests/postgres/README.md b/kubernetes/manifests/postgres/README.md
diff --git a/kubernetes/manifests/postgres/namespace.yaml b/kubernetes/manifests/postgres/namespace.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: v1
+kind: Namespace
+
+metadata:
+  name: postgres