From c6e497ec70c45e452f379ac7060e9660b16ccc35 Mon Sep 17 00:00:00 2001
From: jzunigax2 <125698953+jzunigax2@users.noreply.github.com>
Date: Mon, 13 Jul 2026 16:21:49 -0600
Subject: [PATCH] feat(monitoring): add kube-prometheus-stack configuration and
 stalwart ServiceMonitor

---
 .../kube-prometheus-stack-values.yaml         | 37 +++++++++++++++++++
 .../monitoring/stalwart-servicemonitor.yaml   | 23 ++++++++++++
 2 files changed, 60 insertions(+)
 create mode 100644 deploy/monitoring/kube-prometheus-stack-values.yaml
 create mode 100644 deploy/monitoring/stalwart-servicemonitor.yaml

diff --git a/deploy/monitoring/kube-prometheus-stack-values.yaml b/deploy/monitoring/kube-prometheus-stack-values.yaml
new file mode 100644
index 0000000..0962b19
--- /dev/null
+++ b/deploy/monitoring/kube-prometheus-stack-values.yaml
@@ -0,0 +1,37 @@
+kubeEtcd:
+  enabled: false
+kubeScheduler:
+  enabled: false
+kubeControllerManager:
+  enabled: false
+kubeProxy:
+  enabled: false
+
+prometheus:
+  prometheusSpec:
+    retention: 30d
+    serviceMonitorSelectorNilUsesHelmValues: false
+    podMonitorSelectorNilUsesHelmValues: false
+    ruleSelectorNilUsesHelmValues: false
+    storageSpec:
+      volumeClaimTemplate:
+        spec:
+          accessModes: ['ReadWriteOnce']
+          resources:
+            requests:
+              storage: 20Gi
+    resources:
+      requests:
+        cpu: 200m
+        memory: 768Mi
+      limits:
+        memory: 1536Mi
+
+grafana:
+  adminPassword: password
+  persistence:
+    enabled: true
+    size: 2Gi
+
+alertmanager:
+  enabled: true
diff --git a/deploy/monitoring/stalwart-servicemonitor.yaml b/deploy/monitoring/stalwart-servicemonitor.yaml
new file mode 100644
index 0000000..5fc9688
--- /dev/null
+++ b/deploy/monitoring/stalwart-servicemonitor.yaml
@@ -0,0 +1,23 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: stalwart
+  namespace: mail
+  labels:
+    app: stalwart
+    owner: internxt
+spec:
+  selector:
+    matchLabels:
+      app: stalwart
+  endpoints:
+    - port: http
+      path: /metrics/prometheus
+      interval: 30s
+      basicAuth:
+        username:
+          name: stalwart-metrics-auth
+          key: username
+        password:
+          name: stalwart-metrics-auth
+          key: password