feat(k8s/amour/grafana): add victoria metrics plugin

Author: uhthomas

k8s/amour/grafana/config_map_list.cue

@@ -37,6 +37,11 @@ import (
 				type:   "victorialogs-datasource"
 				access: "proxy"
 				url:    "http://victoria-logs.victoria-logs"
+			}, {
+				name:   "VictoriaMetrics (ds)"
+				type:   "victoriametrics-datasource"
+				access: "proxy"
+				url:    "http://vmsingle-vm.vm:8429"
 			}]
 		})
 		"grafana.ini": """
@@ -66,8 +71,9 @@ import (
 			mode = console
 
 			# https://github.com/VictoriaMetrics/victorialogs-datasource/blob/058bd8d81a8119511abdc35398459a1094381b5c/README.md
+			# https://github.com/VictoriaMetrics/grafana-datasource/blob/5b8a0ba190e116bdebfdb51d11b4e0d03d86d766/README.md
 			[plugins]
-			allow_loading_unsigned_plugins = victorialogs-datasource
+			allow_loading_unsigned_plugins = victorialogs-datasource,victoriametrics-datasource
 			"""
 	}
 }]

k8s/amour/grafana/stateful_set_list.cue

@@ -23,6 +23,15 @@ let downloadVictoriaLogsPluginScript = """
 	rm /var/lib/grafana/plugins/plugin.tar.gz
 	"""
 
+let downloadVictoriaMetricsPluginScript = """
+	set -ex
+	mkdir -p /var/lib/grafana/plugins/
+	ver=$(curl -s https://api.github.com/repos/VictoriaMetrics/grafana-datasource/releases/latest | grep -oE 'v[0-9]+\\.[0-9]+\\.[0-9]+' | head -1)
+	curl -L https://github.com/VictoriaMetrics/grafana-datasource/releases/download/$ver/victoriametrics-datasource-$ver.tar.gz -o /var/lib/grafana/plugins/plugin.tar.gz
+	tar -xf /var/lib/grafana/plugins/plugin.tar.gz -C /var/lib/grafana/plugins/
+	rm /var/lib/grafana/plugins/plugin.tar.gz
+	"""
+
 #StatefulSetList: items: [{
 	spec: {
 		selector: matchLabels: "app.kubernetes.io/name": #Name
@@ -57,6 +66,27 @@ let downloadVictoriaLogsPluginScript = """
 						readOnlyRootFilesystem:   true
 						allowPrivilegeEscalation: false
 					}
+				}, {
+					// https://github.com/VictoriaMetrics/grafana-datasource/blob/5b8a0ba190e116bdebfdb51d11b4e0d03d86d766/README.md
+					name:  "download-victoria-metrics-plugin"
+					image: "curlimages/curl:8.7.1"
+					command: ["/bin/sh"]
+					args: ["-c", downloadVictoriaMetricsPluginScript]
+					workingDir: "/var/lib/grafana"
+					resources: limits: {
+						(v1.#ResourceCPU):    "1"
+						(v1.#ResourceMemory): "1Gi"
+					}
+					volumeMounts: [{
+						name:      "data"
+						mountPath: "/var/lib/grafana"
+					}]
+					imagePullPolicy: v1.#PullIfNotPresent
+					securityContext: {
+						capabilities: drop: ["ALL"]
+						readOnlyRootFilesystem:   true
+						allowPrivilegeEscalation: false
+					}
 				}]
 				containers: [{
 					name:  "grafana"
@@ -115,9 +145,9 @@ let downloadVictoriaLogsPluginScript = """
 					}
 				}]
 				securityContext: {
-					runAsUser:    1000
-					runAsGroup:   3000
-					runAsNonRoot: true
+					runAsUser:           1000
+					runAsGroup:          3000
+					runAsNonRoot:        true
 					fsGroup:             2000
 					fsGroupChangePolicy: v1.#FSGroupChangeOnRootMismatch
 					seccompProfile: type: v1.#SeccompProfileTypeRuntimeDefault

k8s/amour/thomas/BUILD.bazel

@@ -3,14 +3,10 @@ load("@com_github_tnarg_rules_cue//cue:cue.bzl", "cue_library")
 cue_library(
     name = "cue_thomas_library",
     srcs = [
-        "job_list.cue",
         "list.cue",
         "namespace_list.cue",
     ],
     importpath = "github.com/uhthomas/automata/k8s/amour/thomas",
     visibility = ["//visibility:public"],
-    deps = [
-        "//cue.mod/gen/k8s.io/api/batch/v1:cue_v1_library",
-        "//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library",
-    ],
+    deps = ["//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library"],
 )