fullnameOverride: kube-prometheus
namespaceOverride: metrics

prometheusOperator:
  namespace: metrics
  admissionWebhooks:
    failurePolicy: Ignore

alertmanager:
  enabled: true
  alertmanagerSpec:
    resources:
      requests:
        cpu: 50m
        memory: 128Mi
      limits:
        cpu: 200m
        memory: 512Mi
    storage:
      volumeClaimTemplate:
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 10Gi

prometheus:
  enabled: true
  prometheusSpec:
    replicas: 1
    retention: 15d
    walCompression: true
    serviceMonitorSelectorNilUsesHelmValues: false
    podMonitorSelectorNilUsesHelmValues: false
    resources:
      requests:
        cpu: 100m
        memory: 512Mi
      limits:
        cpu: 1000m
        memory: 1Gi
    storageSpec:
      volumeClaimTemplate:
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 50Gi
    remoteWrite:
      - url: http://victoria-metrics.metrics.svc.cluster.local:8428/api/v1/write
        queueConfig:
          maxSamplesPerSend: 10000
          capacity: 5000
          maxShards: 30

kubeEtcd:
  enabled: false

kubeControllerManager:
  enabled: false

kubeScheduler:
  enabled: false

kubeProxy:
  enabled: false

grafana:
  enabled: true
  adminUser: admin
  adminPassword: change-me
  defaultDashboardsEnabled: true
  resources:
    requests:
      cpu: 50m
      memory: 256Mi
    limits:
      cpu: 200m
      memory: 512Mi
  persistence:
    enabled: true
    size: 10Gi
  additionalDataSources:
    - name: victoria-metrics
      type: prometheus
      access: proxy
      url: http://victoria-metrics.metrics.svc.cluster.local:8428
      isDefault: false
  assertNoLeakedSecrets: false
  grafana.ini:
    server:
      root_url: https://grafana.mrt0rtikize.ru
    auth.generic_oauth:
      enabled: true
      name: MAS
      client_id: 01KQZH732S9CB8008FG115A38J
      client_secret: KefR7H9CwS9UWvJP3vP5
      scopes: openid email
      auth_url: https://auth.t0rt1k.tech/authorize
      token_url: https://auth.t0rt1k.tech/oauth2/token
      api_url: https://auth.t0rt1k.tech/oauth2/userinfo
      role_attribute_path: "contains(sub, '01KKXR69CG7Y7BEM4QD2DYKMXN') && 'Admin' || 'Viewer'"