From c7b44b9da6b3302d2b895bb5935d7634ca2a195c Mon Sep 17 00:00:00 2001 From: AI-Agent Date: Sat, 6 Jun 2026 10:02:04 +0000 Subject: [PATCH] docs: update secrets-checklist.md item #4 for Alertmanager dual consumer MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit gatus-slack-webhook (monitoring) is now consumed by two components: 1. Gatus (flux/monitoring/gatus-helmrelease.yaml) - public status-page alerts 2. Alertmanager (flux/monitoring/helmrelease.yaml via alertmanagerSpec.secrets) - SLO / firing-alert Slack notifications (enabled by PR #212 / issue #210) Updates: - Checklist item #4: mention both Gatus AND Alertmanager Slack SLO alerts - Secret Details §4: add Consumers row + dual-consumer note explaining alertmanagerSpec.secrets mounts this secret and the slack_api_url_file path - Dependency order: note Alertmanager is also unblocked by item #4 Closes leeworks-agents/api-company#224 --- docs/secrets-checklist.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/docs/secrets-checklist.md b/docs/secrets-checklist.md index 997aa08..e50fcc2 100644 --- a/docs/secrets-checklist.md +++ b/docs/secrets-checklist.md @@ -12,7 +12,7 @@ Follow this list top-to-bottom; each step unblocks the next. - [ ] 1. `gitea-leeworks-agents-token` (flux-system) — unblocks Flux GitRepository auth - [ ] 2. `gitea-runner-token` (gitea-runner) — unblocks Gitea Actions runner registration - [ ] 3. `grafana-admin` (monitoring) — unblocks Grafana login -- [ ] 4. `gatus-slack-webhook` (monitoring) — unblocks Gatus alert notifications +- [ ] 4. `gatus-slack-webhook` (monitoring) — unblocks Gatus alert notifications AND Alertmanager Slack SLO alerts - [ ] 5. `GITEA_TOKEN` in each API repo's Actions Secrets — unblocks CI image push - [ ] 6. Gitea packages enabled + DNS record for `registry.leeworks.dev` — unblocks image push to registry - [ ] 7. Add api-company Flux source + kustomization to 0xWheatyz/Talos — unblocks all GitOps reconciliation @@ -92,9 +92,12 @@ Grafana will be accessible at `https://grafana.leeworks.dev` (login: `admin` / ` |-----------|-------| | Name | `gatus-slack-webhook` | | Namespace | `monitoring` | -| Purpose | Gatus posts downtime alerts to a Slack channel via incoming webhook | +| Purpose | Gatus posts downtime alerts to a Slack channel via incoming webhook. Also mounted by Alertmanager (`alertmanagerSpec.secrets`) to send SLO / firing-alert Slack notifications. | | Source | Slack → Your workspace → Apps → Incoming Webhooks → Add to Slack → copy webhook URL | -| Unblocks | Issue #8 (Gatus status page at `status.leeworks.dev`) | +| Unblocks | Issue #8 (Gatus status page at `status.leeworks.dev`); Alertmanager Slack receiver (issue #210) | +| Consumers | **Two components** share this secret: (1) **Gatus** (`flux/monitoring/gatus-helmrelease.yaml`) — public status-page alerts; (2) **Alertmanager** (`flux/monitoring/helmrelease.yaml` via `alertmanagerSpec.secrets`) — SLO / firing-alert Slack notifications | + +> **Note (dual consumer):** Creating this one secret (`gatus-slack-webhook` in the `monitoring` namespace) unblocks **both** Gatus alert delivery AND Alertmanager's Slack receiver. The Alertmanager configuration references this secret at `global.slack_api_url_file: /etc/alertmanager/secrets/gatus-slack-webhook/url` (enabled in PR #212 / issue #210). ```bash kubectl create secret generic gatus-slack-webhook \ @@ -266,7 +269,7 @@ kubectl create secret generic rapidapi-proxy-secret \ 1 (gitea-leeworks-token) → Flux can pull this repo over HTTPS 2 (gitea-runner-token) → runner online → CI runs 3 (grafana-admin) → Grafana login works -4 (gatus-slack-webhook) → Gatus alerting works +4 (gatus-slack-webhook) → Gatus alerting works + Alertmanager Slack SLO alerts 5 + 6 (GITEA_TOKEN + registry packages) → CI pushes images → API services deploy 8 (gitea-registry) → pods can pull images from registry.leeworks.dev → services start 9 (gitea-image-automation-token) → Flux ImageUpdateAutomation pushes tag-update commits -- 2.52.0