add VictoriaMetrics cluster metrics collection

apps/victoria-metrics.yaml

@@ -0,0 +1,41 @@
+# Cluster metrics collection for the external VictoriaMetrics and Grafana host.
+# This Application installs only collectors and Kubernetes exporters: metrics
+# are sent over NetBird to prd-vps-hel-01 and are not stored in this cluster.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: victoria-metrics
+  namespace: argocd
+  # The in-cluster pieces are stateless. Cascading deletion is safe because the
+  # durable metrics database lives on the external VPS, not in this namespace.
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+
+  source:
+    repoURL: https://tea.ahmza.com/ahmza.com/k8s-starter-pack.git
+    targetRevision: main
+    path: apps/victoria-metrics
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: monitoring
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    # node-exporter reads host kernel and filesystem metrics through hostPath,
+    # hostNetwork, and hostPID. Scope the required privileged Pod Security
+    # profile to this dedicated monitoring namespace.
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
+        pod-security.kubernetes.io/audit: privileged
+        pod-security.kubernetes.io/warn: privileged
+    syncOptions:
+      - CreateNamespace=true
+      # VictoriaMetrics Operator CRDs are large. Server-side apply avoids the
+      # client-side last-applied annotation size limit and handles CRDs first.
+      - ServerSideApply=true