Files
observability/thanos/manifests/secret.yaml
Mayne0213 9b052b49cf FEAT(thanos): add Thanos for Prometheus HA
- Add Thanos Query, Store Gateway, Compactor
- Enable Prometheus Sidecar with S3 (MinIO) storage
- Configure OCI registry for Bitnami chart
- Fix Vault secret path and image settings
- Add nodeSelector for master node
2026-01-09 21:41:52 +09:00

33 lines
761 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: thanos-objstore-secret
namespace: thanos
spec:
refreshInterval: 1h
secretStoreRef:
name: vault-backend
kind: ClusterSecretStore
target:
name: thanos-objstore-secret
template:
engineVersion: v2
data:
objstore.yml: |
type: S3
config:
bucket: thanos
endpoint: minio.minio.svc.cluster.local:9000
access_key: {{ .access_key }}
secret_key: {{ .secret_key }}
insecure: true
data:
- secretKey: access_key
remoteRef:
key: minio
property: ROOT_USER
- secretKey: secret_key
remoteRef:
key: minio
property: ROOT_PASSWORD