# Cluster metrics collection for the external VictoriaMetrics and Grafana host.
# This Application installs only collectors and Kubernetes exporters: metrics
# are sent over NetBird to prd-vps-hel-01 and are not stored in this cluster.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: victoria-metrics
  namespace: argocd
  # The in-cluster pieces are stateless. Cascading deletion is safe because the
  # durable metrics database lives on the external VPS, not in this namespace.
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://tea.ahmza.com/ahmza.com/k8s-starter-pack.git
    targetRevision: main
    path: apps/victoria-metrics

  destination:
    server: https://kubernetes.default.svc
    namespace: monitoring

  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    # node-exporter reads host kernel and filesystem metrics through hostPath,
    # hostNetwork, and hostPID. Scope the required privileged Pod Security
    # profile to this dedicated monitoring namespace.
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/audit: privileged
        pod-security.kubernetes.io/warn: privileged
    syncOptions:
      - CreateNamespace=true
      # VictoriaMetrics Operator CRDs are large. Server-side apply avoids the
      # client-side last-applied annotation size limit and handles CRDs first.
      - ServerSideApply=true