---
# Monitoring — kube-prometheus-stack + Loki + Alloy. Prometheus/Loki PVCs bind the
# `longhorn` StorageClass, so this dependsOn longhorn (Flux waits for it Ready first).
# Grafana admin password (chart default in dev) and Alertmanager SMTP (deferred to the
# Phase-4 hand-off) are handled WITHOUT an operator secret in dev → NO decryption block.
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: monitoring
  namespace: flux-system
spec:
  interval: 10m
  retryInterval: 2m
  timeout: 15m
  prune: true
  wait: true
  dependsOn:
    - name: longhorn
  sourceRef:
    kind: GitRepository
    name: flux-system
  path: ./platform/monitoring
  postBuild:
    substituteFrom:
      - kind: ConfigMap
        name: cluster-vars