Add otel-monitoring-setup

.gitignore

@@ -0,0 +1 @@
+.idea

clickhouse/clickhouse.yaml

@@ -4,6 +4,10 @@ metadata:
   name: ch
   namespace: monitoring
 spec:
+  tls:
+    clientCaCertificateRefs:
+      - name: "tls-ssl-minio"
+        key: public.crt
   configSecret:
     name: my-config-xml
   version: 24.4.1

clickhouse/custom-config.xml

@@ -1,19 +1,14 @@
 <clickhouse>
-    <openSSL>
-        <client>
-            <verificationMode>none</verificationMode>
-        </client>
-    </openSSL>
     <storage_configuration>
         <disks>
             <local>
                 <path>/var/lib/clickhouse/hot/</path>
             </local>
             <s3>
                 <type>s3</type>
-                <endpoint>https://minio.minio.svc.cluster.local:443/test/logs</endpoint>
-                <access_key_id>minio</access_key_id>
-                <secret_access_key>minio123</secret_access_key>
+                <endpoint>https://minio.minio.svc.cluster.local:9000/test/logs</endpoint>
+                <access_key_id>rootuser</access_key_id>
+                <secret_access_key>rootpass123</secret_access_key>
                 <region>us-east-1</region>
                 <metadata_path>/var/lib/clickhouse/disks/s3_disk/</metadata_path>
             </s3>

ingress/clickhouse-ingress.yaml

@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: clickhouse-ingress
+  namespace: monitoring
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+spec:
+  ingressClassName: nginx-ace
+  rules:
+    - http:
+        paths:
+          - path: /clickhouse(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: ch
+                port:
+                  number: 8123

ingress/thanos-ingress.yaml

@@ -0,0 +1,42 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: thanos-querier-ingress
+  namespace: thanos-operator-system
+  annotations:
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    # No rewrite-target! Pass the full path including /querier/ to backend
+spec:
+  ingressClassName: nginx-ace
+  rules:
+    - http:
+        paths:
+          # For querier UI - route to thanos query (not query-frontend)
+          - path: /querier
+            pathType: Prefix
+            backend:
+              service:
+                name: thanos-query-td-1  # <- This should be thanos query service
+                port:
+                  number: 9090
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: thanos-receiver-ingress
+  namespace: thanos-operator-system
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+spec:
+  ingressClassName: nginx-ace
+  rules:
+    - http:
+        paths:
+          - path: /receiver(/|$)(.*)
+            pathType: Prefix
+            backend:
+              service:
+                name: thanos-receive-router-td-1
+                port:
+                  number: 19291