Adds apps/monitoring/prometheus-deployment.yaml capturing the live PVC/Service/
Deployment for monitoring/prometheus. Two behaviour changes vs the previous
live state:
- strategy: RollingUpdate -> Recreate. prometheus-data-encrypted is RWO on
hcloud-volumes-encrypted; a rolling update deadlocks because the surge pod
cannot attach the PVC while the old pod holds it. This has been jamming the
weekly OS-update preflight (see DEV-582). Same fix pattern as loki
(loki-deployment.yaml) and opencloud (DEV-538).
- pod-template annotation backup.velero.io/backup-volumes-excludes:
prometheus-storage. Restores the annotation that rev 6 tried to add before
the RollingUpdate deadlock forced a rollback in DEV-582.
Applied and verified: rollout succeeded, /-/ready and /-/healthy both green,
pod running on k3s-worker-6 after PVC re-attach.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
