prole/etc/hostprobe-pi.yaml
chrisfu 792329ddd2 Milestone: monitoring deployment + svc firewall persistence
- k3s role: persist svc.prole.org reachability with a systemd oneshot that inserts ACCEPT rules ahead of Tailscale filter rules (configurable ports/chain).

- init_monitoring: enable Grafana datasource sidecar and provision a stable Prometheus datasource (uid 'prometheus') so CloudNativePG dashboards bind correctly.

- tests: assert datasource sidecar config and datasource ConfigMap is applied.

Co-authored-by: Junie <junie@jetbrains.com>
2026-03-19 12:19:02 -07:00

19 lines
370 B
YAML

apiVersion: v1
kind: Pod
metadata:
name: prole-hostprobe-pi
namespace: kube-system
spec:
nodeName: pi.prole.org
hostNetwork: true
hostPID: true
tolerations:
- operator: Exists
containers:
- name: netshoot
image: nicolaka/netshoot:latest
securityContext:
privileged: true
command: ["sleep", "86400"]
restartPolicy: Never