v-m: Scrape Grafana Loki

Grafana Loki is hosted on a VM named *loki0.pyrocufflink.blue*.  It runs
Fedora CoreOS, so in addition to scraping Loki itself, we need to scrape
_collectd_ and _Zincati_ as well.

victoria-metrics/kustomization.yaml

@@ -22,6 +22,7 @@ resources:
 - alertmanager.yaml
 - blackbox-exporter.yaml
 - ingress.yaml
+- ../dch-root-ca
 
 configMapGenerator:
 - name: vmagent
@@ -137,6 +138,9 @@ patches:
                   key: graylog.token
                   optional: true
             volumeMounts:
+            - mountPath: /run/dch-ca
+              name: dch-ca
+              readOnly: true
             - mountPath: /run/secrets/vmagent
               name: secrets
               readOnly: true
@@ -151,6 +155,10 @@ patches:
           - name: secrets
             secret:
               secretName: vmagent
+          - name: dch-ca
+            configMap:
+              name: dch-root-ca
+              optional: true
 
 - patch: |
     apiVersion: apps/v1

victoria-metrics/scrape.yml

@@ -80,6 +80,7 @@ scrape_configs:
     - k8s-aarch64-n0.pyrocufflink.blue
     - k8s-aarch64-n1.pyrocufflink.blue
     - k8s-amd64-n3.pyrocufflink.blue
+    - loki0.pyrocufflink.blue
     - nut0.pyrocufflink.blue
     - nvr1.pyrocufflink.blue
     - serial1.pyrocufflink.blue
@@ -282,6 +283,7 @@ scrape_configs:
     - k8s-aarch64-n0.pyrocufflink.blue
     - k8s-aarch64-n1.pyrocufflink.blue
     - k8s-amd64-n3.pyrocufflink.blue
+    - loki0.pyrocufflink.blue
     - nut0.pyrocufflink.blue
     - nvr1.pyrocufflink.blue
     - serial1.pyrocufflink.blue
@@ -297,3 +299,11 @@ scrape_configs:
   static_configs:
   - targets:
     - grafana.pyrocufflink.blue
+
+- job_name: loki
+  scheme: https
+  tls_config:
+    ca_file: /run/dch-ca/dch-root-ca.crt
+  static_configs:
+  - targets:
+    - loki.pyrocufflink.blue:3100