Add cert checker module: implement Kubernetes resources, certificate validation logic, and deployment restart functionality

This commit is contained in:
2025-10-02 16:53:28 +02:00
parent e6a3f3affd
commit a412c96c46
15 changed files with 644 additions and 10 deletions
+6 -1
View File
@@ -1,5 +1,10 @@
resource "kubernetes_namespace" "monitoring" {
resource "kubernetes_namespace" "prometheus" {
metadata {
name = "prometheus"
}
}
moved {
from = kubernetes_namespace.monitoring
to = kubernetes_namespace.prometheus
}
@@ -1,7 +1,7 @@
resource "kubernetes_service_account" "prometheus" {
metadata {
name = "prometheus"
namespace = kubernetes_namespace.monitoring.metadata[0].name
namespace = kubernetes_namespace.prometheus.metadata[0].name
}
}
@@ -48,14 +48,14 @@ resource "kubernetes_cluster_role_binding" "prometheus" {
subject {
kind = "ServiceAccount"
name = kubernetes_service_account.prometheus.metadata[0].name
namespace = kubernetes_namespace.monitoring.metadata[0].name
namespace = kubernetes_namespace.prometheus.metadata[0].name
}
}
resource "kubernetes_config_map" "prometheus" {
metadata {
name = "prometheus-server-conf"
namespace = kubernetes_namespace.monitoring.metadata[0].name
namespace = kubernetes_namespace.prometheus.metadata[0].name
labels = {
name = "prometheus-server-conf"
}
@@ -70,7 +70,7 @@ resource "kubernetes_config_map" "prometheus" {
resource "kubernetes_deployment" "prometheus" {
metadata {
name = "prometheus"
namespace = kubernetes_namespace.monitoring.metadata[0].name
namespace = kubernetes_namespace.prometheus.metadata[0].name
labels = {
app = "prometheus"
}
@@ -155,7 +155,7 @@ resource "kubernetes_deployment" "prometheus" {
resource "kubernetes_service" "prometheus" {
metadata {
name = "prometheus"
namespace = kubernetes_namespace.monitoring.metadata[0].name
namespace = kubernetes_namespace.prometheus.metadata[0].name
annotations = {
"prometheus.io/scrape" = "true"
"prometheus.io/port" = "9090"
@@ -180,7 +180,7 @@ resource "kubernetes_service" "prometheus" {
# resource "kubernetes_ingress_v1" "prometheus" {
# metadata {
# name = "prometheus-ui"
# namespace = kubernetes_namespace.monitoring.metadata[0].name
# namespace = kubernetes_namespace.prometheus.metadata[0].name
# annotations = {
# "kubernetes.io/ingress.class" = var.ingress_class
# }