feat(gitops): populate declarative manifests for all 10 workloads and correct destination namespaces

manifests/spaceport/zabbix/zabbix.yaml

@@ -0,0 +1,599 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: server
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-server
+  namespace: monitoring
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: server
+      app.kubernetes.io/instance: zabbix
+      app.kubernetes.io/name: zabbix
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: server
+        app.kubernetes.io/instance: zabbix
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: zabbix
+        app.kubernetes.io/version: 7.0.16
+        helm.sh/chart: zabbix-7.0.12
+    spec:
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/component: server
+                  app.kubernetes.io/instance: zabbix
+                  app.kubernetes.io/name: zabbix
+              topologyKey: kubernetes.io/hostname
+            weight: 1
+      containers:
+      - env:
+        - name: DB_SERVER_HOST
+          value: zabbix-postgresql
+        - name: DB_SERVER_PORT
+          value: '5432'
+        - name: POSTGRES_USER
+          valueFrom:
+            secretKeyRef:
+              key: user
+              name: zabbix-db-access
+              optional: true
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: password
+              name: zabbix-db-access
+        - name: POSTGRES_DB
+          value: zabbix
+        - name: ZBX_NODEADDRESS
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: status.podIP
+        - name: ZBX_WEBSERVICEURL
+          value: http://zabbix-zabbix-webservice:10053/report
+        - name: ZBX_STARTREPORTWRITERS
+          value: '1'
+        - name: ZBX_JAVAGATEWAY_ENABLE
+          value: 'false'
+        - name: ZBX_WEBDRIVERURL
+          value: http://zabbix-chrome:4444
+        image: zabbix/zabbix-server-pgsql:ubuntu-7.0.32
+        imagePullPolicy: IfNotPresent
+        name: zabbix-server
+        ports:
+        - containerPort: 10051
+          name: zabbix-server
+          protocol: TCP
+        - containerPort: 10052
+          name: zabbix-jmx
+          protocol: TCP
+        resources: {}
+        securityContext: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      - env:
+        - name: ZBX_HOSTNAME
+          value: Zabbix server
+        - name: ZBX_SERVER_HOST
+          value: 0.0.0.0/0
+        - name: ZBX_SERVER_PORT
+          value: '10051'
+        - name: ZBX_PASSIVE_ALLOW
+          value: 'true'
+        - name: ZBX_PASSIVESERVERS
+        - name: ZBX_ACTIVE_ALLOW
+          value: 'false'
+        - name: ZBX_ACTIVESERVERS
+        - name: ZBX_DEBUGLEVEL
+          value: '3'
+        - name: ZBX_TIMEOUT
+          value: '4'
+        - name: ZBX_LOADMODULE
+        image: zabbix/zabbix-agent2:ubuntu-7.0.32
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 3
+          periodSeconds: 10
+          successThreshold: 1
+          tcpSocket:
+            port: zabbix-agent
+          timeoutSeconds: 3
+        name: zabbix-agent
+        ports:
+        - containerPort: 10050
+          name: zabbix-agent
+          protocol: TCP
+        resources: {}
+        securityContext: {}
+        startupProbe:
+          failureThreshold: 5
+          initialDelaySeconds: 15
+          periodSeconds: 5
+          successThreshold: 1
+          tcpSocket:
+            port: zabbix-agent
+          timeoutSeconds: 3
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: zabbix
+      serviceAccountName: zabbix
+      terminationGracePeriodSeconds: 30
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: web
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-web
+  namespace: monitoring
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: web
+      app.kubernetes.io/instance: zabbix
+      app.kubernetes.io/name: zabbix
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/restartedAt: '1793197639.2173924'
+      labels:
+        app.kubernetes.io/component: web
+        app.kubernetes.io/instance: zabbix
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: zabbix
+        app.kubernetes.io/version: 7.0.16
+        helm.sh/chart: zabbix-7.0.12
+    spec:
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/instance: zabbix-zabbix-web
+              topologyKey: kubernetes.io/hostname
+            weight: 1
+      containers:
+      - env:
+        - name: DB_SERVER_HOST
+          value: zabbix-postgresql
+        - name: DB_SERVER_PORT
+          value: '5432'
+        - name: POSTGRES_USER
+          valueFrom:
+            secretKeyRef:
+              key: user
+              name: zabbix-db-access
+              optional: true
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: password
+              name: zabbix-db-access
+        - name: POSTGRES_DB
+          value: zabbix
+        image: zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.32
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 6
+          httpGet:
+            path: /ping
+            port: zabbix-web
+            scheme: HTTP
+          initialDelaySeconds: 30
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        name: zabbix-web
+        ports:
+        - containerPort: 8080
+          name: zabbix-web
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 6
+          httpGet:
+            path: /ping
+            port: zabbix-web
+            scheme: HTTP
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        resources: {}
+        securityContext: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /usr/share/zabbix/conf/certs
+          name: saml-certs
+        - mountPath: /etc/zabbix/web/certs
+          name: saml-certs
+        - mountPath: /etc/nginx/fastcgi_params
+          name: saml-certs
+          subPath: fastcgi_params
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: zabbix
+      serviceAccountName: zabbix
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - configMap:
+          defaultMode: 420
+          name: zabbix-saml-certs
+        name: saml-certs
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: webservice
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-webservice
+  namespace: monitoring
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: webservice
+      app.kubernetes.io/instance: zabbix
+      app.kubernetes.io/name: zabbix
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: webservice
+        app.kubernetes.io/instance: zabbix
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: zabbix
+        app.kubernetes.io/version: 7.0.16
+        helm.sh/chart: zabbix-7.0.12
+    spec:
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/instance: zabbix-zabbix-webservice
+              topologyKey: kubernetes.io/hostname
+            weight: 1
+      containers:
+      - env:
+        - name: ZBX_ALLOWEDIP
+          value: ::/0
+        image: zabbix/zabbix-web-service:ubuntu-7.0.32
+        imagePullPolicy: IfNotPresent
+        name: zabbix-webservice
+        ports:
+        - containerPort: 10053
+          name: webservice
+          protocol: TCP
+        resources: {}
+        securityContext: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: zabbix
+      serviceAccountName: zabbix
+      terminationGracePeriodSeconds: 30
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: postgresql
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-postgresql
+  namespace: monitoring
+spec:
+  persistentVolumeClaimRetentionPolicy:
+    whenDeleted: Retain
+    whenScaled: Retain
+  podManagementPolicy: OrderedReady
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: postgresql
+      app.kubernetes.io/instance: zabbix
+      app.kubernetes.io/name: zabbix
+  serviceName: zabbix
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: postgresql
+        app.kubernetes.io/instance: zabbix
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: zabbix
+        app.kubernetes.io/version: 7.0.16
+        helm.sh/chart: zabbix-7.0.12
+    spec:
+      containers:
+      - args:
+        - -c
+        - max_connections=100
+        env:
+        - name: DB_SERVER_HOST
+          value: zabbix-postgresql
+        - name: DB_SERVER_PORT
+          value: '5432'
+        - name: POSTGRES_USER
+          valueFrom:
+            secretKeyRef:
+              key: user
+              name: zabbix-db-access
+              optional: true
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: password
+              name: zabbix-db-access
+        - name: POSTGRES_DB
+          value: zabbix
+        - name: PGDATA
+          value: /var/lib/postgresql/data/pgdata
+        image: postgres:16
+        imagePullPolicy: IfNotPresent
+        name: postgresql
+        ports:
+        - containerPort: 5432
+          name: db
+          protocol: TCP
+        resources: {}
+        securityContext: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data
+          name: postgresql-data
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: zabbix
+      serviceAccountName: zabbix
+      terminationGracePeriodSeconds: 30
+  updateStrategy:
+    rollingUpdate:
+      partition: 0
+    type: RollingUpdate
+  volumeClaimTemplates:
+  - apiVersion: v1
+    kind: PersistentVolumeClaim
+    metadata:
+      name: postgresql-data
+    spec:
+      accessModes:
+      - ReadWriteOnce
+      resources:
+        requests:
+          storage: 50Gi
+      volumeMode: Filesystem
+    status:
+      phase: Pending
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: postgresql
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-postgresql
+  namespace: monitoring
+spec:
+  clusterIP: 10.43.246.111
+  clusterIPs:
+  - 10.43.246.111
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - name: db
+    port: 5432
+    protocol: TCP
+    targetPort: 5432
+  selector:
+    app.kubernetes.io/component: postgresql
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/name: zabbix
+  sessionAffinity: None
+  type: ClusterIP
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+    metallb.io/ip-allocated-from-pool: lan-pool
+    metallb.universe.tf/loadBalancerIP: 140.44.4.64
+  finalizers:
+  - service.kubernetes.io/load-balancer-cleanup
+  labels:
+    app.kubernetes.io/component: server
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-server
+  namespace: monitoring
+spec:
+  allocateLoadBalancerNodePorts: true
+  clusterIP: 10.43.14.128
+  clusterIPs:
+  - 10.43.14.128
+  externalTrafficPolicy: Cluster
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  loadBalancerIP: 140.44.4.64
+  ports:
+  - name: zabbix-server
+    nodePort: 32156
+    port: 10051
+    protocol: TCP
+    targetPort: 10051
+  - name: zabbix-jmx
+    nodePort: 31105
+    port: 10052
+    protocol: TCP
+    targetPort: 10052
+  selector:
+    app.kubernetes.io/component: server
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/name: zabbix
+  sessionAffinity: None
+  type: LoadBalancer
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+    metallb.io/ip-allocated-from-pool: lan-pool
+    metallb.universe.tf/loadBalancerIP: 140.44.4.60
+  finalizers:
+  - service.kubernetes.io/load-balancer-cleanup
+  labels:
+    app.kubernetes.io/component: web
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-web
+  namespace: monitoring
+spec:
+  allocateLoadBalancerNodePorts: true
+  clusterIP: 10.43.156.214
+  clusterIPs:
+  - 10.43.156.214
+  externalTrafficPolicy: Cluster
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  loadBalancerIP: 140.44.4.60
+  ports:
+  - name: zabbix-web
+    nodePort: 31080
+    port: 8888
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app.kubernetes.io/component: web
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/name: zabbix
+  sessionAffinity: None
+  type: LoadBalancer
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    meta.helm.sh/release-name: zabbix
+    meta.helm.sh/release-namespace: monitoring
+  labels:
+    app.kubernetes.io/component: webservice
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: zabbix
+    app.kubernetes.io/version: 7.0.16
+    helm.sh/chart: zabbix-7.0.12
+  name: zabbix-zabbix-webservice
+  namespace: monitoring
+spec:
+  clusterIP: 10.43.76.219
+  clusterIPs:
+  - 10.43.76.219
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - name: webservice
+    port: 10053
+    protocol: TCP
+    targetPort: 10053
+  selector:
+    app.kubernetes.io/component: webservice
+    app.kubernetes.io/instance: zabbix
+    app.kubernetes.io/name: zabbix
+  sessionAffinity: None
+  type: ClusterIP