alertmanager: use a secret for the config

assets/alertmanager/alertmanager.yaml

@@ -0,0 +1,12 @@
+global:
+  resolve_timeout: 5m
+route:
+  group_by: ['job']
+  group_wait: 30s
+  group_interval: 5m
+  repeat_interval: 12h
+  receiver: 'webhook'
+receivers:
+- name: 'webhook'
+  webhook_configs:
+  - url: 'http://alertmanagerwh:30500/'

hack/scripts/generate-configmaps.sh

@@ -6,3 +6,6 @@ kubectl create configmap --dry-run=true prometheus-k8s-rules --from-file=assets/
 # Generate Dashboard ConfigMap
 kubectl create configmap --dry-run=true grafana-dashboards --from-file=assets/grafana/ -oyaml > manifests/grafana/grafana-dashboards.yaml
 
+# Generate Secret for Alertmanager config
+kubectl create secret generic alertmanager-main --dry-run --from-file=assets/alertmanager/alertmanager.yaml -oyaml > manifests/alertmanager/alertmanager-config.yaml
+

manifests/alertmanager/alertmanager-config.yaml

@@ -1,18 +1,7 @@
 apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: alertmanager-main
 data:
-  alertmanager.yaml: |-
+  alertmanager.yaml: Z2xvYmFsOgogIHJlc29sdmVfdGltZW91dDogNW0Kcm91dGU6CiAgZ3JvdXBfYnk6IFsnam9iJ10KICBncm91cF93YWl0OiAzMHMKICBncm91cF9pbnRlcnZhbDogNW0KICByZXBlYXRfaW50ZXJ2YWw6IDEyaAogIHJlY2VpdmVyOiAnd2ViaG9vaycKcmVjZWl2ZXJzOgotIG5hbWU6ICd3ZWJob29rJwogIHdlYmhvb2tfY29uZmlnczoKICAtIHVybDogJ2h0dHA6Ly9hbGVydG1hbmFnZXJ3aDozMDUwMC8nCg==
-    global:
+kind: Secret
-      resolve_timeout: 5m
+metadata:
-    route:
+  creationTimestamp: null
-      group_by: ['job']
+  name: alertmanager-main
-      group_wait: 30s
-      group_interval: 5m
-      repeat_interval: 12h
-      receiver: 'webhook'
-    receivers:
-    - name: 'webhook'
-      webhook_configs:
-      - url: 'http://alertmanagerwh:30500/'