feat(infra): production bootstrap — cert-manager, longhorn, monitoring
Add new bases for cert-manager (Let's Encrypt + wildcard cert), Longhorn
distributed storage, and monitoring (kube-prometheus-stack + Loki + Tempo
+ Grafana OIDC). Add cloud-init for Scaleway Elastic Metal provisioning.
Production overlay: add patches for postgres sizing, SeaweedFS volume,
OpenSearch storage, LiveKit service, Pingora host ports, resource limits,
and CNPG daily barman backups. Update cert-manager.yaml with full dnsNames
for all *.sunbeam.pt subdomains.
2026-03-06 12:06:27 +00:00
|
|
|
# Tempo — monolithic single-binary, local filesystem backend.
|
|
|
|
|
# Receives OTLP over gRPC (:4317) and HTTP (:4318).
|
|
|
|
|
tempo:
|
|
|
|
|
reportingEnabled: false
|
|
|
|
|
receivers:
|
|
|
|
|
otlp:
|
|
|
|
|
protocols:
|
|
|
|
|
grpc:
|
|
|
|
|
endpoint: "0.0.0.0:4317"
|
|
|
|
|
http:
|
|
|
|
|
endpoint: "0.0.0.0:4318"
|
|
|
|
|
storage:
|
|
|
|
|
trace:
|
|
|
|
|
backend: local
|
|
|
|
|
local:
|
|
|
|
|
path: /var/tempo/traces
|
|
|
|
|
wal:
|
|
|
|
|
path: /var/tempo/wal
|
2026-03-21 17:36:54 +00:00
|
|
|
# Generate span-derived RED metrics (rate / errors / duration) and push
|
|
|
|
|
# them into Prometheus so Grafana can show service-level indicators
|
|
|
|
|
# even without application-level metrics exporters.
|
|
|
|
|
metricsGenerator:
|
|
|
|
|
enabled: true
|
|
|
|
|
remoteWriteUrl: "http://kube-prometheus-stack-prometheus.monitoring.svc.cluster.local:9090/api/v1/write"
|
|
|
|
|
overrides:
|
|
|
|
|
defaults:
|
|
|
|
|
metrics_generator:
|
|
|
|
|
processors:
|
|
|
|
|
- service-graphs
|
|
|
|
|
- span-metrics
|
feat(infra): production bootstrap — cert-manager, longhorn, monitoring
Add new bases for cert-manager (Let's Encrypt + wildcard cert), Longhorn
distributed storage, and monitoring (kube-prometheus-stack + Loki + Tempo
+ Grafana OIDC). Add cloud-init for Scaleway Elastic Metal provisioning.
Production overlay: add patches for postgres sizing, SeaweedFS volume,
OpenSearch storage, LiveKit service, Pingora host ports, resource limits,
and CNPG daily barman backups. Update cert-manager.yaml with full dnsNames
for all *.sunbeam.pt subdomains.
2026-03-06 12:06:27 +00:00
|
|
|
|
|
|
|
|
persistence:
|
|
|
|
|
enabled: true
|
|
|
|
|
size: 20Gi
|
|
|
|
|
|
|
|
|
|
# Expose OTLP ports as a ClusterIP service
|
|
|
|
|
service:
|
|
|
|
|
type: ClusterIP
|
