support: Add support chart

Adds a prometheus / grafana chart that uses GitHub for
authentication.

Currently, prometheus can't reach into hub / singleuser servers,
since z2jh doesn't support cross-namespace networkpolicy.
jupyterhub/zero-to-jupyterhub-k8s#1380 should
fix that.

.gitattributes

@@ -6,3 +6,4 @@ hub/secrets/prod.yaml filter=git-crypt diff=git-crypt
 hub/secrets/** filter=git-crypt diff=git-crypt
 deployments/*/secrets/** filter=git-crypt diff=git-crypt
 deployments/**/secrets/** filter=git-crypt diff=git-crypt
+support/secrets.yaml filter=git-crypt diff=git-crypt

support/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: "1.0"
+description: Support chart for entire cluster
+name: support
+version: 0.1.0

support/requirements.yaml

@@ -0,0 +1,7 @@
+dependencies:
+ - name: prometheus
+   version: 9.1.0
+   repository: https://kubernetes-charts.storage.googleapis.com
+ - name: grafana
+   version: 3.8.5
+   repository: https://kubernetes-charts.storage.googleapis.com

support/templates/pd-ssd.yaml

@@ -0,0 +1,9 @@
+# Create an SSD StorageClass for use by Prometheus
+# See https://kubernetes.io/docs/concepts/storage/storage-classes/#gce for details
+kind: StorageClass
+apiVersion: storage.k8s.io/v1
+metadata:
+  name: ssd
+provisioner: kubernetes.io/gce-pd
+parameters:
+  type: pd-ssd

support/values.yaml

@@ -0,0 +1,52 @@
+prometheus:
+  networkPolicy:
+    enabled: true
+  alertmanager:
+    enabled: False
+  nodeExporter:
+    tolerations:
+      - effect: NoSchedule
+        # Deploy onto user nodes
+        key: hub.jupyter.org_dedicated
+        value: user
+    updateStrategy:
+      type: RollingUpdate
+  pushgateway:
+    enabled: false
+  rbac:
+    create: true
+  server:
+    labels:
+      # For HTTP access to the hub, to scrape metrics
+      hub.jupyter.org/network-access-hub: "true"
+    persistentVolume:
+      size: 1000Gi
+      storageClass: ssd
+    retention: 180d
+    service:
+      type: ClusterIP
+
+grafana:
+  deploymentStrategy: 
+    type: Recreate
+
+  persistence: 
+    enabled: true
+  service:
+    type: LoadBalancer
+
+  grafana.ini:
+    server:
+      root_url: http://grafana.datahub.berkeley.edu/
+  datasources:
+    datasources.yaml:
+      apiVersion: 1
+      datasources:
+        - name: prometheus
+          orgId: 1
+          type: prometheus
+          url: http://support-prometheus-server
+          access: proxy
+          isDefault: true
+          editable: false
+