add vmalert

kubernetes/apps/observability/victoria-metrics/cluster/kustomization.yaml

@@ -3,5 +3,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  # - vmalert.yaml
+  - vmalert.yaml
   - vmsingle.yaml

kubernetes/apps/observability/victoria-metrics/cluster/vmalert.yaml

@@ -5,22 +5,27 @@ kind: VMAlert
 metadata:
   name: cluster
 spec:
+  evaluationInterval: 1m
+  useStrictSecurity: true
+  selectAllByDefault: true
   datasource:
     url: http://vmsingle-cluster.observability.svc:8429
-  evaluationInterval: 1m
   notifiers:
     - url: http://alertmanager.observability.svc:9093
-  # remoteRead:
-  #   url: http://vmsingle-cluster.observability.svc:8429
-  # remoteWrite:
-  #   url: http://vmsingle-cluster.observability.svc:8429
-  replicaCount: 1
+  remoteRead:
+    url: http://vmsingle-cluster.observability.svc:8429
+  remoteWrite:
+    url: http://vmsingle-cluster.observability.svc:8429
+  securityContext:
+    runAsUser: 65534
+    runAsGroup: 65534
+    runAsNonRoot: true
+    fsGroup: 65534
   resources:
     requests:
       cpu: 3m
     limits:
       memory: 128Mi
-  selectAllByDefault: true
   topologySpreadConstraints:
     - maxSkew: 1
       topologyKey: kubernetes.io/hostname
@@ -29,4 +34,3 @@ spec:
         matchLabels:
           app.kubernetes.io/instance: cluster
           app.kubernetes.io/name: vmalert
-  useStrictSecurity: true