feat: metrics write endpoint for cloudflare workers (#147)

deployment/modules/1password/account/k8s-secrets.tf

@@ -53,3 +53,25 @@ resource "onepassword_item" "grafana_admin_credentials" {
     }
   }
 }
+
+resource "random_password" "cf_workers_metrics_token" {
+  length           = 40
+  special          = true
+  override_special = "!@#$%^&*()_+"
+}
+
+resource "onepassword_item" "cf_workers_metrics_token" {
+  vault    = data.onepassword_vault.kubernetes.uuid
+  title    = "cf-workers-metrics-token"
+  category = "secure_note"
+
+  section {
+    label = "Cloudflare workers metrics write token"
+
+    field {
+      label = "token"
+      type  = "CONCEALED"
+      value = random_password.cf_workers_metrics_token.result
+    }
+  }
+}

kubernetes/apps/monitoring/victoria-metrics/ingress/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.yaml
+  - ./vmuser.yaml
+  - ./vmauth.yaml

kubernetes/apps/monitoring/victoria-metrics/ingress/secret.yaml

@@ -0,0 +1,7 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: cf-workers-metrics-token
+  namespace: monitoring
+spec:
+  itemPath: "vaults/Kubernetes/items/cf-workers-metrics-token"

kubernetes/apps/monitoring/victoria-metrics/ingress/vmauth.yaml

@@ -0,0 +1,15 @@
+apiVersion: operator.victoriametrics.com/v1beta1
+kind: VMAuth
+metadata:
+  name: cf-workers-metrics-ingress
+spec:
+  userSelector: {}
+  userNamespaceSelector: {}
+  selectAllByDefault: true
+  ingress:
+    tlsSecretName: cf-workers-metrics-tls
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-production
+    class_name: nginx
+    tlsHosts:
+      - cf-workers.monitoring.immich.cloud

kubernetes/apps/monitoring/victoria-metrics/ingress/vmuser.yaml

@@ -0,0 +1,15 @@
+apiVersion: operator.victoriametrics.com/v1beta1
+kind: VMUser
+metadata:
+  name: cf-workers
+  namespace: monitoring
+spec:
+  tokenRef:
+    name: cf-workers-metrics-token
+    key: token
+  targetRefs:
+    - crd:
+        kind: VMSingle
+        name: vmetrics
+        namespace: monitoring
+      paths: ["/write"]

kubernetes/apps/monitoring/victoria-metrics/ks.yaml

@@ -1,12 +1,12 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: &app victoria-metrics
+  name: &app1 victoria-metrics
   namespace: flux-system
 spec:
   commonMetadata:
     labels:
-      app.kubernetes.io/name: *app
+      app.kubernetes.io/name: *app1
   dependsOn:
     - name: grafana-operator
   path: ./kubernetes/apps/monitoring/victoria-metrics/app
@@ -18,3 +18,24 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 5m
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app2 cf-workers-metrics-ingress
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app2
+  dependsOn:
+    - name: victoria-metrics
+  path: ./kubernetes/apps/monitoring/victoria-metrics/ingress
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: immich-kubernetes
+  wait: true
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m