feat(thanos) ruler component

thanos/charts/ci/test-values.yaml

@@ -14,3 +14,9 @@ ci:
 thanos:
   ruler:
     matchLabel: thanos
+    alertmanagers:
+      authentication:
+        enabled: true
+        ssoCert:
+        ssoKey:
+      hosts:

thanos/charts/templates/ruler/_alertmanager.yaml.tpl

@@ -0,0 +1,14 @@
+{{- define "alertmanagers.config" }}
+alertmanagers:
+  - scheme: https
+    timeout: 10s
+    api_version: v2
+    {{- if .Values.thanos.ruler.alertmanagers.authentication.enabled }}
+    http_config:
+      tls_config:
+        cert_file: /etc/thanos/secrets/thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert/sso.crt
+        key_file: /etc/thanos/secrets/thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert/sso.key
+    {{- end }}
+    static_configs:
+{{ toYaml .Values.thanos.ruler.alertmanagers.hosts | indent 8 }}
+{{- end }}

thanos/charts/templates/ruler/alertmanager-config.yaml

@@ -0,0 +1,11 @@
+{{ if .Values.thanos.ruler.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "release.name" . }}-alertmanager-config
+  labels:
+    thanos: {{ include "release.name" . }}
+data:
+  alertManagerConfig.yaml: |
+{{ template "alertmanagers.config" . }}
+{{ end }}

thanos/charts/templates/ruler/alertmanager-sso-secret.yaml

@@ -0,0 +1,10 @@
+{{ if .Values.thanos.ruler.alertmanagers.authentication.enabled }}
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert
+data:
+  sso.crt: {{ required ".Values.thanos.ruler.alertmanagers.authentication.ssoCert missing" .Values.thanos.ruler.alertmanagers.authentication.ssoCert }}
+  sso.key: {{ required ".Values.thanos.ruler.alertmanagers.authentication.ssoKey missing" .Values.thanos.ruler.alertmanagers.authentication.ssoKey }}
+{{ end }}

thanos/charts/templates/ruler.yaml → thanos/charts/templates/ruler/ruler.yaml

@@ -3,7 +3,7 @@ SPDX-FileCopyrightText: 2024 SAP SE or an SAP affiliate company and Greenhouse c
 SPDX-License-Identifier: Apache-2.0
 */}}
 
-{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.thanos.ruler.enabled }}
+{{ if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.thanos.ruler.enabled }}
 apiVersion: monitoring.coreos.com/v1
 kind: ThanosRuler
 metadata:
@@ -29,4 +29,16 @@ spec:
     {{ toYaml .Values.thanos.ruler.alertLabels | nindent 4 }}
   # Select rules from all namespaces.
   ruleNamespaceSelector: {}  
+{{ if .Values.thanos.ruler.alertmanagers.authentication.enabled }}
+  containers:
+    - name: thanos-ruler
+      volumeMounts:
+        - mountPath: /etc/thanos/secrets/thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert
+          name: thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert
+          readOnly: true
+  volumes:
+    - name: thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert
+      secret:
+        secretName: thanos-ruler-{{ include "release.name" . }}-alertmanager-sso-cert
+{{ end }}
 {{ end }}

thanos/charts/templates/tests/test-ci.yaml

@@ -8,14 +8,4 @@ data:
   thanos.yaml: >-
     dHlwZTogRklMRVNZU1RFTQpjb25maWc6CiAgZGlyZWN0b3J5OiAiL3Rlc3QiCnByZWZpeDogIiIKCgogICMga3ViZWN0bCBjcmVhdGUgc2VjcmV0IGdlbmVyaWMgb2JqZWN0LXN0b3JlLXNlY3JldCAtLWZyb20tZmlsZT10aGFub3MueWFtbD0uL3Rlc3Qtc2VjcmV0LnlhbWwgLW4gZGVtbwo=
 type: Opaque
----
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: {{ include "release.name" . }}-alertmanager-config
-  labels:
-    thanos: {{ include "release.name" . }}
-data:
-  alertManagerConfig.yaml: ""
 {{- end -}}

thanos/charts/values.yaml

@@ -113,6 +113,13 @@ thanos:
 
     matchLabel:
 
+    alertmanagers:
+      authentication:
+        enabled: true
+        ssoCert:
+        ssoKey:
+      hosts:
+
 testFramework:
   enabled: true
   image: