initial k8up monitoring config

k8up/k8up.yaml

@@ -165,6 +165,8 @@ spec:
           value: http://10.42.42.2:9000
         - name: BACKUP_GLOBALS3BUCKET
           value: knurrli-k8up
+        - name: BACKUP_PROMURL
+          value: prometheus-pushgateway.monitoring.svc
         ports:
         - containerPort: 8080
           protocol: TCP

k8up/service-monitor.yaml

@@ -4,8 +4,6 @@ kind: ServiceMonitor
 metadata:
   name: k8up
   namespace: k8up
-  labels:
-    release: prometheus-operator
 spec:
   endpoints:
   - interval: 30s

monitoring/manifests/prometheus-roleBindingSpecificNamespaces.yaml

@@ -39,4 +39,17 @@ items:
   - kind: ServiceAccount
     name: prometheus-k8s
     namespace: monitoring
+- apiVersion: rbac.authorization.k8s.io/v1
+  kind: RoleBinding
+  metadata:
+    name: prometheus-k8s
+    namespace: k8up
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: Role
+    name: prometheus-k8s
+  subjects:
+  - kind: ServiceAccount
+    name: prometheus-k8s
+    namespace: monitoring
 kind: RoleBindingList

monitoring/manifests/prometheus-roleSpecificNamespaces.yaml

@@ -48,4 +48,20 @@ items:
     - get
     - list
     - watch
+- apiVersion: rbac.authorization.k8s.io/v1
+  kind: Role
+  metadata:
+    name: prometheus-k8s
+    namespace: k8up
+  rules:
+  - apiGroups:
+    - ""
+    resources:
+    - services
+    - endpoints
+    - pods
+    verbs:
+    - get
+    - list
+    - watch
 kind: RoleList

monitoring/monitoring.jsonnet

@@ -16,6 +16,7 @@ local kp =
       prometheus+:: {
         names: 'k8s',
         replicas: 1,
+        namespaces+: ['k8up'],
       },
       alertmanager+:: {
         replicas: 1,