Use only Vault instead of gcloud when deploying Prometheus rules
- Use only Vault instead of
gcloud
when deploying Prometheus rules - Install
kubectl
from its own image instead of viagcloud
to control its version
This will allow us to remove the k8s-workloads-ro
service accounts.
We still need to keep gcloud
in the image though because it's still being used to upload the Thanos rules.
Adjacent to gitlab-com/gl-infra/production-engineering#25390 (closed)
Edited by Pierre Guinoiseau