add kube-prometheus-stack

Signed-off-by: gwg313 <gwg313@pm.me>

remove vals

Signed-off-by: gwg313 <gwg313@pm.me>

platform/kyverno/policies/generate-ns-network-baseline.yaml

@@ -29,6 +29,7 @@ spec:
                 - cert-manager
                 - sealed-secrets
                 - nfs-subdir-external-provisioner
+                - monitoring
       generate:
         apiVersion: cilium.io/v2
         kind: CiliumNetworkPolicy

platform/kyverno/policies/require-requests-limits.yaml

@@ -33,6 +33,7 @@ spec:
                 - cert-manager
                 - sealed-secrets
                 - nfs-subdir-external-provisioner
+                - monitoring
       validate:
         message: "Resource discipline violation: Containers must declare cpu/memory requests and limits."
         pattern:

platform/monitoring/Chart.yaml

@@ -0,0 +1,9 @@
+apiVersion: v2
+name: cluster-monitoring
+description: chart for cluster monitoring stack
+type: application
+version: 1.0.0
+dependencies:
+  - name: kube-prometheus-stack
+    version: "85.1.3"
+    repository: "https://prometheus-community.github.io/helm-charts"

platform/monitoring/templates/namespace.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: monitoring
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged