Files
sbbb/base/media/kustomization.yaml
Sienna Meridian Satterwhite 3fc54c8851 feat: add PrometheusRule alerts for all services
28 alert rules across 9 PrometheusRule files covering infrastructure
(Longhorn, cert-manager), data (PostgreSQL, OpenBao, OpenSearch),
storage (SeaweedFS), devtools (Gitea), identity (Hydra, Kratos),
media (LiveKit), and mesh (Linkerd golden signals for all services).

Severity routing: critical alerts fire to Matrix + email, warnings
to Matrix only (AlertManager config updated in separate commit).
2026-03-24 12:20:55 +00:00

57 lines
1.5 KiB
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: media
resources:
- namespace.yaml
- vault-secrets.yaml
- livekit-alertrules.yaml
# livekit-servicemonitor.yaml disabled — LiveKit runs on hostNetwork and port 6789
# is not reachable from Prometheus due to host firewall. Open port 6789 on the host
# or add an iptables rule, then re-enable.
helmCharts:
# helm repo add livekit https://helm.livekit.io
# releaseName=livekit-server matches chart name → Helm deduplicates the prefix,
# so resources are named `livekit-server` instead of `livekit-livekit-server`.
- name: livekit-server
repo: https://helm.livekit.io
version: "1.9.0"
releaseName: livekit-server
namespace: media
valuesFile: livekit-values.yaml
# The livekit-server chart does not set .Release.Namespace in its templates,
# so kustomize's namespace field doesn't inject it automatically.
# Patch namespace onto each chart-rendered resource explicitly.
patches:
- patch: |
- op: add
path: /metadata/namespace
value: media
target:
kind: Deployment
name: livekit-server
- patch: |
- op: add
path: /metadata/namespace
value: media
target:
kind: Service
name: livekit-server
- patch: |
- op: add
path: /metadata/namespace
value: media
target:
kind: Service
name: livekit-server-turn
- patch: |
- op: add
path: /metadata/namespace
value: media
target:
kind: ConfigMap
name: livekit-server