2022-04-03 17:59:29 +00:00
# Default values for kube-prometheus-stack.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
## Provide custom recording or alerting rules to be deployed into the cluster.
##
additionalPrometheusRulesMap : {}
# rule-name:
# groups:
# - name: my_group
# rules:
# - record: my_record
# expr: 100 * my_record
alertmanager :
ingress :
2022-04-04 19:08:50 +00:00
enabled : true
2022-04-03 17:59:29 +00:00
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
2023-02-28 09:54:40 +00:00
ingressClassName : ingress-internal
2022-04-03 17:59:29 +00:00
2022-05-11 15:59:27 +00:00
annotations :
2022-04-04 19:08:50 +00:00
cert-manager.io/cluster-issuer : vault-issuer
traefik.ingress.kubernetes.io/router.tls : 'true'
2022-04-03 17:59:29 +00:00
labels : {}
## Hosts must be provided if Ingress is enabled.
##
2022-05-11 15:59:27 +00:00
hosts :
2022-04-04 19:08:50 +00:00
- alertmanager.dc
2022-04-03 17:59:29 +00:00
## Paths to use for ingress rules - one path should match the alertmanagerSpec.routePrefix
##
2022-04-04 19:08:50 +00:00
paths :
- /
2022-04-03 17:59:29 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
2022-04-04 19:08:50 +00:00
pathType : ImplementationSpecific
2022-04-03 17:59:29 +00:00
## TLS configuration for Alertmanager Ingress
## Secret must be manually created in the namespace
##
2022-04-04 19:08:50 +00:00
tls :
- secretName : alertmanager-general-tls
hosts :
- alertmanager.dc
2022-04-03 17:59:29 +00:00
##
servicePerReplica :
enabled : false
## If true, create a serviceMonitor for alertmanager
##
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
selfMonitor : true
2023-02-17 22:03:35 +00:00
#
2022-04-03 17:59:29 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#alertmanagerspec
##
alertmanagerSpec :
## If true then the user will be responsible to provide a secret with alertmanager configuration
## So when true the config part will be ignored (including templateFiles) and the one in the secret will be used
##
useExistingSecret : false
## Size is the expected size of the alertmanager cluster. The controller will eventually make the size of the
## running cluster equal to the expected size.
replicas : 1
## Time duration Alertmanager shall retain data for. Default is '120h', and must match the regular expression
## [0-9]+(ms|s|m|h) (milliseconds seconds minutes hours).
##
retention : 120h
## SecurityContext holds pod-level security attributes and common container settings.
## This defaults to non root user with uid 1000 and gid 2000. *v1.PodSecurityContext false
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 1000
fsGroup : 2000
## Using default values from https://github.com/grafana/helm-charts/blob/main/charts/grafana/values.yaml
##
grafana :
enabled : true
namespaceOverride : "grafana"
2022-04-04 19:08:50 +00:00
image :
repository : grafana/grafana
2024-05-15 00:51:54 +00:00
tag : 10.4 .3
2022-04-04 19:08:50 +00:00
2022-05-11 15:59:27 +00:00
persistence :
enabled : true
2022-12-30 19:38:01 +00:00
type : pvc
2023-02-15 21:39:18 +00:00
storageClassName : local-path
2022-12-30 19:38:01 +00:00
accessModes :
- ReadWriteOnce
2023-02-15 21:39:18 +00:00
size : 10Gi
2022-12-30 19:38:01 +00:00
finalizers :
- kubernetes.io/pvc-protection
2022-05-11 15:59:27 +00:00
2022-04-03 17:59:29 +00:00
## ForceDeployDatasources Create datasource configmap even if grafana deployment has been disabled
##
forceDeployDatasources : false
## ForceDeployDashboard Create dashboard configmap even if grafana deployment has been disabled
##
forceDeployDashboards : false
## Deploy default dashboards
##
defaultDashboardsEnabled : true
## Timezone for the default dashboards
## Other options are: browser or a specific timezone, i.e. Europe/Luxembourg
##
defaultDashboardsTimezone : utc
2022-04-04 19:08:50 +00:00
adminPassword : prom-operator
2022-04-03 17:59:29 +00:00
rbac :
## If true, Grafana PSPs will be created
##
pspEnabled : false
ingress :
## If true, Grafana Ingress will be created
##
enabled : true
## IngressClassName for Grafana Ingress.
## Should be provided if Ingress is enable.
##
2023-02-28 09:54:40 +00:00
ingressClassName : ingress-internal
2022-04-03 17:59:29 +00:00
## Annotations for Grafana Ingress
##
annotations :
#kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer : vault-issuer
traefik.ingress.kubernetes.io/router.tls : 'true'
# kubernetes.io/tls-acme: "true"
## Labels to be added to the Ingress
##
labels : {}
## Hostnames.
## Must be provided if Ingress is enable.
##
# hosts:
# - grafana.domain.com
2022-05-11 15:59:27 +00:00
hosts :
2022-04-03 17:59:29 +00:00
- grafana.dc
## Path for grafana ingress
path : /
## TLS configuration for grafana Ingress
## Secret must be manually created in the namespace
##
2022-05-11 15:59:27 +00:00
tls :
2022-04-03 17:59:29 +00:00
- secretName : grafana-general-tls
hosts :
- grafana.dc
2022-04-04 19:08:50 +00:00
admin :
existingSecret : "grafana"
2022-04-03 17:59:29 +00:00
sidecar :
dashboards :
enabled : true
label : grafana_dashboard
labelValue : "1"
## Annotations for Grafana dashboard configmaps
##
annotations : {}
multicluster :
global :
enabled : false
etcd :
enabled : false
provider :
allowUiUpdates : false
datasources :
enabled : true
defaultDatasourceEnabled : true
uid : prometheus
## URL of prometheus datasource
##
# url: http://prometheus-stack-prometheus:9090/
# If not defined, will use prometheus.prometheusSpec.scrapeInterval or its default
# defaultDatasourceScrapeInterval: 15s
## Annotations for Grafana datasource configmaps
##
annotations : {}
## Create datasource for each Pod of Prometheus StatefulSet;
## this uses headless service `prometheus-operated` which is
## created by Prometheus Operator
## ref: https://git.io/fjaBS
createPrometheusReplicasDatasources : false
label : grafana_datasource
labelValue : "1"
## Component scraping the kube api server
##
kubeApiServer :
enabled : true
tlsConfig :
serverName : kubernetes
insecureSkipVerify : false
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
jobLabel : component
selector :
matchLabels :
component : apiserver
provider : kubernetes
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
## Component scraping the kubelet and kubelet-hosted cAdvisor
##
kubelet :
2023-03-30 17:50:25 +00:00
enabled : true
2022-04-03 17:59:29 +00:00
namespace : kube-system
serviceMonitor :
## Enable scraping the kubelet over https. For requirements to enable this see
## https://github.com/prometheus-operator/prometheus-operator/issues/926
##
https : true
## Enable scraping /metrics/cadvisor from kubelet's service
##
cAdvisor : true
## Enable scraping /metrics/probes from kubelet's service
##
probes : true
## Enable scraping /metrics/resource from kubelet's service
## This is disabled by default because container metrics are already exposed by cAdvisor
##
resource : false
# From kubernetes 1.18, /metrics/resource/v1alpha1 renamed to /metrics/resource
resourcePath : "/metrics/resource/v1alpha1"
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
## metrics_path is required to match upstream rules and charts
cAdvisorRelabelings :
- sourceLabels : [ __metrics_path__]
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
probesRelabelings :
- sourceLabels : [ __metrics_path__]
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
resourceRelabelings :
- sourceLabels : [ __metrics_path__]
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - sourceLabels: [__name__, image]
# separator: ;
# regex: container_([a-z_]+);
# replacement: $1
# action: drop
# - sourceLabels: [__name__]
# separator: ;
# regex: container_(network_tcp_usage_total|network_udp_usage_total|tasks_state|cpu_load_average_10s)
# replacement: $1
# action: drop
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
## metrics_path is required to match upstream rules and charts
relabelings :
- sourceLabels : [ __metrics_path__]
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping the kube controller manager
##
kubeControllerManager :
enabled : true
## If your kube controller manager is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## If using kubeControllerManager.endpoints only the port and targetPort are used
##
service :
enabled : true
## If null or unset, the value is determined dynamically based on target Kubernetes version due to change
## of default port in Kubernetes 1.22.
##
port : null
targetPort : null
# selector:
# component: kube-controller-manager
serviceMonitor :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## Enable scraping kube-controller-manager over https.
## Requires proper certs (not self-signed) and delegated authentication/authorization checks.
## If null or unset, the value is determined dynamically based on target Kubernetes version.
##
https : null
# Skip TLS certificate validation when scraping
insecureSkipVerify : null
# Name of the server to use when validating TLS certificate
serverName : null
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping coreDns. Use either this or kubeDns
##
coreDns :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
service :
port : 9153
targetPort : 9153
# selector:
# k8s-app: kube-dns
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping kubeDns. Use either this or coreDns
##
kubeDns :
enabled : false
service :
dnsmasq :
port : 10054
targetPort : 10054
skydns :
port : 10055
targetPort : 10055
# selector:
# k8s-app: kube-dns
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
dnsmasqMetricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
dnsmasqRelabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping etcd
##
kubeEtcd :
enabled : false
## If your etcd is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## Etcd service. If using kubeEtcd.endpoints only the port and targetPort are used
##
service :
enabled : true
port : 2379
targetPort : 2379
# selector:
# component: etcd
## Configure secure access to the etcd cluster by loading a secret into prometheus and
## specifying security configuration below. For example, with a secret named etcd-client-cert
##
## serviceMonitor:
## scheme: https
## insecureSkipVerify: false
## serverName: localhost
## caFile: /etc/prometheus/secrets/etcd-client-cert/etcd-ca
## certFile: /etc/prometheus/secrets/etcd-client-cert/etcd-client
## keyFile: /etc/prometheus/secrets/etcd-client-cert/etcd-client-key
##
serviceMonitor :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
scheme : http
insecureSkipVerify : false
serverName : ""
caFile : ""
certFile : ""
keyFile : ""
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping kube scheduler
##
kubeScheduler :
enabled : true
## If your kube scheduler is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## If using kubeScheduler.endpoints only the port and targetPort are used
##
service :
enabled : true
## If null or unset, the value is determined dynamically based on target Kubernetes version due to change
## of default port in Kubernetes 1.23.
##
port : null
targetPort : null
# selector:
# component: kube-scheduler
serviceMonitor :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## Enable scraping kube-scheduler over https.
## Requires proper certs (not self-signed) and delegated authentication/authorization checks.
## If null or unset, the value is determined dynamically based on target Kubernetes version.
##
https : null
## Skip TLS certificate validation when scraping
insecureSkipVerify : null
## Name of the server to use when validating TLS certificate
serverName : null
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Component scraping kube proxy
##
kubeProxy :
enabled : true
## If your kube proxy is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
service :
enabled : true
port : 10249
targetPort : 10249
# selector:
# k8s-app: kube-proxy
serviceMonitor :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## Enable scraping kube-proxy over https.
## Requires proper certs (not self-signed) and delegated authentication/authorization checks
##
https : false
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## Component scraping kube state metrics
##
kubeStateMetrics :
enabled : true
## Configuration for kube-state-metrics subchart
##
kube-state-metrics :
namespaceOverride : ""
rbac :
create : true
releaseLabel : true
prometheus :
monitor :
enabled : true
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## Scrape Timeout. If not set, the Prometheus default scrape timeout is used.
##
scrapeTimeout : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
# Keep labels from scraped data, overriding server-side labels
##
honorLabels : true
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
selfMonitor :
enabled : false
## Deploy node exporter as a daemonset to all nodes
##
nodeExporter :
enabled : true
## Configuration for prometheus-node-exporter subchart
##
prometheus-node-exporter :
namespaceOverride : ""
podLabels :
## Add the 'node-exporter' label to be used by serviceMonitor to match standard common usage in rules and grafana dashboards
##
jobLabel : node-exporter
extraArgs :
- --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/)
- --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$
service :
portName : http-metrics
prometheus :
monitor :
enabled : true
jobLabel : jobLabel
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## How long until a scrape request times out. If not set, the Prometheus default scape timeout is used.
##
scrapeTimeout : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - sourceLabels: [__name__]
# separator: ;
# regex: ^node_mountstats_nfs_(event|operations|transport)_.+
# replacement: $1
# action: drop
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
rbac :
## If true, create PSPs for node-exporter
##
pspEnabled : false
## Manages Prometheus and Alertmanager components
##
prometheusOperator :
enabled : true
2023-02-18 12:09:48 +00:00
tls :
enabled : true
2022-04-03 17:59:29 +00:00
2023-02-18 12:09:48 +00:00
admissionWebhooks :
enabled : true
2022-04-03 17:59:29 +00:00
## If true, the operator will create and maintain a service for scraping kubelets
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/helm/prometheus-operator/README.md
##
kubeletService :
2023-02-28 15:58:18 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
namespace : kube-system
## Use '{{ template "kube-prometheus-stack.fullname" . }}-kubelet' by default
name : ""
## Create a servicemonitor for the operator
##
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
## Scrape timeout. If not set, the Prometheus default scrape timeout is used.
scrapeTimeout : ""
selfMonitor : true
## Metric relabel configs to apply to samples before ingestion.
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
# relabel configs to apply to samples before ingestion.
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Resource limits & requests
##
resources : {}
# limits:
# cpu: 200m
# memory: 200Mi
# requests:
# cpu: 100m
# memory: 100Mi
# Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),
# because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working
##
hostNetwork : false
## Prometheus-operator image
##
## Set a Field Selector to filter watched secrets
##
secretFieldSelector : ""
## Deploy a Prometheus instance
##
prometheus :
enabled : true
2022-05-11 15:59:27 +00:00
strategy :
2022-04-04 19:08:50 +00:00
type : Recreate
2023-02-17 22:07:30 +00:00
sidecarContainers : {}
# smartctl:
# name: smartctl-exporter
# image: matusnovak/prometheus-smartctl:latest
# securityContext:
# runAsNonRoot: false
# privileged: true
# ports:
# - name: metrics
# containerPort: 9902
2022-04-04 19:08:50 +00:00
2022-04-03 17:59:29 +00:00
## Annotations for Prometheus
##
annotations : {}
2022-04-04 19:08:50 +00:00
2022-04-03 17:59:29 +00:00
## Service account for Prometheuses to use.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
create : true
name : ""
annotations : {}
# Service for thanos service discovery on sidecar
# Enable this can make Thanos Query can use
# `--store=dnssrv+_grpc._tcp.${kube-prometheus-stack.fullname}-thanos-discovery.${namespace}.svc.cluster.local` to discovery
# Thanos sidecar on prometheus nodes
# (Please remember to change ${kube-prometheus-stack.fullname} and ${namespace}. Not just copy and paste!)
thanosService :
2023-02-17 22:03:35 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
annotations : {}
labels : {}
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
##
type : ClusterIP
## gRPC port config
portName : grpc
port : 10901
targetPort : "grpc"
## HTTP port config (for metrics)
httpPortName : http
httpPort : 10902
targetHttpPort : "http"
## ClusterIP to assign
# Default is to make this a headless service ("None")
clusterIP : "None"
## Port to expose on each node, if service type is NodePort
##
nodePort : 30901
httpNodePort : 30902
# ServiceMonitor to scrape Sidecar metrics
# Needs thanosService to be enabled as well
thanosServiceMonitor :
2023-03-29 20:01:51 +00:00
enabled : false
2022-04-03 17:59:29 +00:00
interval : ""
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
## Of type: https://github.com/coreos/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
tlsConfig : {}
bearerTokenFile :
## Metric relabel configs to apply to samples before ingestion.
metricRelabelings : [ ]
## relabel configs to apply to samples before ingestion.
relabelings : [ ]
# Service for external access to sidecar
# Enabling this creates a service to expose thanos-sidecar outside the cluster.
thanosServiceExternal :
enabled : false
annotations : {}
labels : {}
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
## gRPC port config
portName : grpc
port : 10901
targetPort : "grpc"
## HTTP port config (for metrics)
httpPortName : http
httpPort : 10902
targetHttpPort : "http"
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
##
type : LoadBalancer
## Port to expose on each node
##
nodePort : 30901
httpNodePort : 30902
## Configuration for Prometheus service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port for Prometheus Service to listen on
##
port : 9090
## To be used with a proxy extraContainer port
targetPort : 9090
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
externalIPs : [ ]
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30090
## Loadbalancer IP
## Only use if service.type is "LoadBalancer"
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
##
type : ClusterIP
## Additional port to define in the Service
additionalPorts : [ ]
## Consider that all endpoints are considered "ready" even if the Pods themselves are not
## Ref: https://kubernetes.io/docs/reference/kubernetes-api/service-resources/service-v1/#ServiceSpec
publishNotReadyAddresses : false
sessionAffinity : ""
## Configuration for creating a separate Service for each statefulset Prometheus replica
##
servicePerReplica :
enabled : false
annotations : {}
## Port for Prometheus Service per replica to listen on
##
port : 9090
## To be used with a proxy extraContainer port
targetPort : 9090
## Port to expose on each node
## Only used if servicePerReplica.type is 'NodePort'
##
nodePort : 30091
## Loadbalancer source IP ranges
## Only used if servicePerReplica.type is "LoadBalancer"
loadBalancerSourceRanges : [ ]
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
##
type : ClusterIP
## Configure pod disruption budgets for Prometheus
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/#specifying-a-poddisruptionbudget
## This configuration is immutable once created and will require the PDB to be deleted to be changed
## https://github.com/kubernetes/kubernetes/issues/45398
##
podDisruptionBudget :
enabled : false
minAvailable : 1
maxUnavailable : ""
# Ingress exposes thanos sidecar outside the cluster
thanosIngress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
servicePort : 10901
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30901
## Hosts must be provided if Ingress is enabled.
##
hosts : [ ]
# - thanos-gateway.domain.com
## Paths to use for ingress rules
##
paths : [ ]
# - /
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
## TLS configuration for Thanos Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: thanos-gateway-tls
# hosts:
# - thanos-gateway.domain.com
#
## ExtraSecret can be used to store various data in an extra secret
## (use it for example to store hashed basic auth credentials)
extraSecret :
## if not set, name will be auto generated
# name: ""
annotations : {}
data : {}
# auth: |
# foo:$apr1$OFG3Xybp$ckL0FHDAkoXYIlH9.cysT0
# someoneelse:$apr1$DMZX2Z4q$6SbQIfyuLQd.xmo/P0m2c.
ingress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
## Hostnames.
## Must be provided if Ingress is enabled.
##
# hosts:
# - prometheus.domain.com
hosts : [ ]
## Paths to use for ingress rules - one path should match the prometheusSpec.routePrefix
##
paths : [ ]
# - /
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
## TLS configuration for Prometheus Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: prometheus-general-tls
# hosts:
# - prometheus.example.com
## Configuration for creating an Ingress that will map to each Prometheus replica service
## prometheus.servicePerReplica must be enabled
##
ingressPerReplica :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
## Final form of the hostname for each per replica ingress is
## {{ ingressPerReplica.hostPrefix }}-{{ $replicaNumber }}.{{ ingressPerReplica.hostDomain }}
##
## Prefix for the per replica ingress that will have `-$replicaNumber`
## appended to the end
hostPrefix : ""
## Domain that will be used for the per replica ingress
hostDomain : ""
## Paths to use for ingress rules
##
paths : [ ]
# - /
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
## Secret name containing the TLS certificate for Prometheus per replica ingress
## Secret must be manually created in the namespace
tlsSecretName : ""
## Separated secret for each per replica Ingress. Can be used together with cert-manager
##
tlsSecretPerReplica :
enabled : false
## Final form of the secret for each per replica ingress is
## {{ tlsSecretPerReplica.prefix }}-{{ $replicaNumber }}
##
prefix : "prometheus"
## Configure additional options for default pod security policy for Prometheus
## ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
podSecurityPolicy :
allowedCapabilities : [ ]
allowedHostPaths : [ ]
volumes : [ ]
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
selfMonitor : true
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
## Of type: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
tlsConfig : {}
bearerTokenFile :
## Metric relabel configs to apply to samples before ingestion.
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
# relabel configs to apply to samples before ingestion.
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Settings affecting prometheusSpec
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#prometheusspec
##
prometheusSpec :
## If true, pass --storage.tsdb.max-block-duration=2h to prometheus. This is already done if using Thanos
##
disableCompaction : false
## APIServerConfig
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#apiserverconfig
##
apiserverConfig : {}
## Interval between consecutive scrapes.
## Defaults to 30s.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/release-0.44/pkg/prometheus/promcfg.go#L180-L183
##
2023-03-29 20:01:51 +00:00
scrapeInterval : "60s"
2022-04-03 17:59:29 +00:00
## Number of seconds to wait for target to respond before erroring
##
scrapeTimeout : ""
## Interval between consecutive evaluations.
##
evaluationInterval : ""
## ListenLocal makes the Prometheus server listen on loopback, so that it does not bind against the Pod IP.
##
listenLocal : false
## EnableAdminAPI enables Prometheus the administrative HTTP API which includes functionality such as deleting time series.
## This is disabled by default.
## ref: https://prometheus.io/docs/prometheus/latest/querying/api/#tsdb-admin-apis
##
enableAdminAPI : false
## WebTLSConfig defines the TLS parameters for HTTPS
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#webtlsconfig
web : {}
# EnableFeatures API enables access to Prometheus disabled features.
# ref: https://prometheus.io/docs/prometheus/latest/disabled_features/
enableFeatures : [ ]
# - exemplar-storage
## Image of Prometheus.
##
## Tolerations for use with node taints
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
## If specified, the pod's topology spread constraints.
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
##
topologySpreadConstraints : [ ]
# - maxSkew: 1
# topologyKey: topology.kubernetes.io/zone
# whenUnsatisfiable: DoNotSchedule
# labelSelector:
# matchLabels:
# app: prometheus
## Alertmanagers to which alerts will be sent
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#alertmanagerendpoints
##
## Default configuration will connect to the alertmanager deployed as part of this release
##
alertingEndpoints : [ ]
# - name: ""
# namespace: ""
# port: http
# scheme: http
# pathPrefix: ""
# tlsConfig: {}
# bearerTokenFile: ""
# apiVersion: v2
## External labels to add to any time series or alerts when communicating with external systems
##
externalLabels : {}
## Name of the external label used to denote replica name
##
replicaExternalLabelName : ""
## If true, the Operator won't add the external label used to denote replica name
##
replicaExternalLabelNameClear : false
## Name of the external label used to denote Prometheus instance name
##
prometheusExternalLabelName : ""
## If true, the Operator won't add the external label used to denote Prometheus instance name
##
prometheusExternalLabelNameClear : false
## External URL at which Prometheus will be reachable.
##
externalUrl : ""
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Secrets is a list of Secrets in the same namespace as the Prometheus object, which shall be mounted into the Prometheus Pods.
## The Secrets are mounted into /etc/prometheus/secrets/. Secrets changes after initial creation of a Prometheus object are not
## reflected in the running Pods. To change the secrets mounted into the Prometheus Pods, the object must be deleted and recreated
## with the new list of secrets.
##
secrets : [ ]
## ConfigMaps is a list of ConfigMaps in the same namespace as the Prometheus object, which shall be mounted into the Prometheus Pods.
## The ConfigMaps are mounted into /etc/prometheus/configmaps/.
##
configMaps : [ ]
## QuerySpec defines the query command line flags when starting Prometheus.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#queryspec
##
query : {}
## Namespaces to be selected for PrometheusRules discovery.
## If nil, select own namespace. Namespaces to be selected for ServiceMonitor discovery.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#namespaceselector for usage
##
ruleNamespaceSelector : {}
## If true, a nil or {} value for prometheus.prometheusSpec.ruleSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the PrometheusRule resources created
##
ruleSelectorNilUsesHelmValues : true
## PrometheusRules to be selected for target discovery.
## If {}, select all PrometheusRules
##
ruleSelector : {}
## Example which select all PrometheusRules resources
## with label "prometheus" with values any of "example-rules" or "example-rules-2"
# ruleSelector:
# matchExpressions:
# - key: prometheus
# operator: In
# values:
# - example-rules
# - example-rules-2
#
## Example which select all PrometheusRules resources with label "role" set to "example-rules"
# ruleSelector:
# matchLabels:
# role: example-rules
## If true, a nil or {} value for prometheus.prometheusSpec.serviceMonitorSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the servicemonitors created
##
serviceMonitorSelectorNilUsesHelmValues : true
## ServiceMonitors to be selected for target discovery.
## If {}, select all ServiceMonitors
##
serviceMonitorSelector : {}
## Example which selects ServiceMonitors with label "prometheus" set to "somelabel"
# serviceMonitorSelector:
# matchLabels:
# prometheus: somelabel
## Namespaces to be selected for ServiceMonitor discovery.
##
serviceMonitorNamespaceSelector : {}
## Example which selects ServiceMonitors in namespaces with label "prometheus" set to "somelabel"
# serviceMonitorNamespaceSelector:
# matchLabels:
# prometheus: somelabel
## If true, a nil or {} value for prometheus.prometheusSpec.podMonitorSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the podmonitors created
##
podMonitorSelectorNilUsesHelmValues : true
## PodMonitors to be selected for target discovery.
## If {}, select all PodMonitors
##
podMonitorSelector : {}
## Example which selects PodMonitors with label "prometheus" set to "somelabel"
# podMonitorSelector:
# matchLabels:
# prometheus: somelabel
## Namespaces to be selected for PodMonitor discovery.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#namespaceselector for usage
##
podMonitorNamespaceSelector : {}
## If true, a nil or {} value for prometheus.prometheusSpec.probeSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the probes created
##
probeSelectorNilUsesHelmValues : true
## Probes to be selected for target discovery.
## If {}, select all Probes
##
probeSelector : {}
## Example which selects Probes with label "prometheus" set to "somelabel"
# probeSelector:
# matchLabels:
# prometheus: somelabel
## Namespaces to be selected for Probe discovery.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#namespaceselector for usage
##
probeNamespaceSelector : {}
## How long to retain metrics
##
2023-02-28 13:54:50 +00:00
retention : 90d
2022-04-03 17:59:29 +00:00
## Maximum size of metrics
##
retentionSize : ""
## Enable compression of the write-ahead log using Snappy.
##
walCompression : false
## If true, the Operator won't process any Prometheus configuration changes
##
paused : false
## Number of replicas of each shard to deploy for a Prometheus deployment.
## Number of replicas multiplied by shards is the total number of Pods created.
##
replicas : 1
## EXPERIMENTAL: Number of shards to distribute targets onto.
## Number of replicas multiplied by shards is the total number of Pods created.
## Note that scaling down shards will not reshard data onto remaining instances, it must be manually moved.
## Increasing shards will not reshard data either but it will continue to be available from the same instances.
## To query globally use Thanos sidecar and Thanos querier or remote write data to a central location.
## Sharding is done on the content of the `__address__` target meta-label.
##
shards : 1
## Log level for Prometheus be configured in
##
logLevel : info
## Log format for Prometheus be configured in
##
logFormat : logfmt
## Prefix used to register routes, overriding externalUrl route.
## Useful for proxies that rewrite URLs.
##
routePrefix : /
## Standard object's metadata. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata
## Metadata Labels and Annotations gets propagated to the prometheus pods.
##
podMetadata : {}
# labels:
# app: prometheus
# k8s-app: prometheus
## Pod anti-affinity can prevent the scheduler from placing Prometheus replicas on the same node.
## The default value "soft" means that the scheduler should *prefer* to not schedule two replica pods onto the same node but no guarantee is provided.
## The value "hard" means that the scheduler is *required* to not schedule two replica pods onto the same node.
## The value "" will disable pod anti-affinity so that no anti-affinity rules will be configured.
podAntiAffinity : ""
## If anti-affinity is enabled sets the topologyKey to use for anti-affinity.
## This can be changed to, for example, failure-domain.beta.kubernetes.io/zone
##
podAntiAffinityTopologyKey : kubernetes.io/hostname
## Assign custom affinity rules to the prometheus instance
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
## The remote_read spec configuration for Prometheus.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#remotereadspec
remoteRead : [ ]
# - url: http://remote1/read
## additionalRemoteRead is appended to remoteRead
additionalRemoteRead : [ ]
## The remote_write spec configuration for Prometheus.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#remotewritespec
remoteWrite : [ ]
# - url: http://remote1/push
## additionalRemoteWrite is appended to remoteWrite
additionalRemoteWrite : [ ]
## Enable/Disable Grafana dashboards provisioning for prometheus remote write feature
remoteWriteDashboards : false
## Resource limits & requests
##
resources : {}
# requests:
# memory: 400Mi
## Prometheus StorageSpec for persistent data
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/storage.md
##
2023-02-28 13:54:50 +00:00
storageSpec :
2022-04-03 17:59:29 +00:00
## Using PersistentVolumeClaim
##
2023-02-28 13:54:50 +00:00
volumeClaimTemplate :
spec :
storageClassName : ssd
accessModes : [ "ReadWriteOnce" ]
resources :
requests :
storage : 50Gi
2022-04-03 17:59:29 +00:00
# selector: {}
## Using tmpfs volume
##
# emptyDir:
# medium: Memory
# Additional volumes on the output StatefulSet definition.
volumes : [ ]
# Additional VolumeMounts on the output StatefulSet definition.
volumeMounts : [ ]
## AdditionalScrapeConfigs allows specifying additional Prometheus scrape configurations. Scrape configurations
## are appended to the configurations generated by the Prometheus Operator. Job configurations must have the form
## as specified in the official Prometheus documentation:
## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config. As scrape configs are
## appended, the user is responsible to make sure it is valid. Note that using this feature may expose the possibility
## to break upgrades of Prometheus. It is advised to review Prometheus release notes to ensure that no incompatible
## scrape configs are going to break Prometheus after the upgrade.
##
## The scrape configuration example below will find master nodes, provided they have the name .*mst.*, relabel the
## port to 2379 and allow etcd scraping provided it is running on all Kubernetes master nodes
##
2022-04-04 19:08:50 +00:00
additionalScrapeConfigs :
# This scrapes all services/pods with prometheus.io/scrape annotation:
2023-02-28 13:54:50 +00:00
#- job_name: 'smartctl'
# scrape_interval: 60s
# static_configs:
# - targets: ['127.0.0.1:9902']
2023-03-02 13:55:26 +00:00
- job_name : 'openwrt-router'
scrape_interval : 60s
2022-04-04 19:08:50 +00:00
static_configs :
- targets : [ '192.168.1.1:9100' ]
2023-03-02 13:55:26 +00:00
2023-12-26 13:11:48 +00:00
- job_name : 'hive-ipmi'
2023-03-02 13:55:26 +00:00
scrape_interval : 60s
static_configs :
2023-12-26 13:11:48 +00:00
- targets : [ '192.168.1.111:9290' ]
2023-03-02 13:55:26 +00:00
2024-05-13 07:55:32 +00:00
- job_name : 'esplant'
scrape_interval : 60s
static_configs :
- targets : [ 'esplant.lan:80' ]
- job_name : 'kubernetes-services'
scrape_interval : 120s
kubernetes_sd_configs :
- role : service
relabel_configs :
- source_labels : [ __meta_kubernetes_service_annotation_prometheus_io_scrape]
action : keep
regex : true
- source_labels : [ __meta_kubernetes_service_annotation_prometheus_io_path]
action : replace
target_label : __metrics_path__
regex : (.+)
- source_labels : [ __address__, __meta_kubernetes_service_annotation_prometheus_io_port]
action : replace
regex : ([^:]+)(?::\d+)?;(\d+)
replacement : $1:$2
target_label : __address__
- action : labelmap
regex : __meta_kubernetes_service_label_(.+)
- source_labels : [ __meta_kubernetes_namespace]
action : replace
target_label : kubernetes_namespace
- source_labels : [ __meta_kubernetes_service_name]
action : replace
target_label : kubernetes_service_name
- job_name : 'kubernetes-pods'
scrape_interval : 120s
kubernetes_sd_configs :
- role : pod
relabel_configs :
- source_labels : [ __meta_kubernetes_pod_annotation_prometheus_io_scrape]
action : keep
regex : true
- source_labels : [ __meta_kubernetes_pod_annotation_prometheus_io_path]
action : replace
target_label : __metrics_path__
regex : (.+)
- source_labels : [ __address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
2022-04-04 19:08:50 +00:00
- job_name : 'kubernetes-services'
2023-03-29 20:01:51 +00:00
scrape_interval : 120s
2022-04-04 19:08:50 +00:00
kubernetes_sd_configs :
- role : service
relabel_configs :
- source_labels : [ __meta_kubernetes_service_annotation_prometheus_io_scrape]
action : keep
regex : true
- source_labels : [ __meta_kubernetes_service_annotation_prometheus_io_path]
action : replace
target_label : __metrics_path__
regex : (.+)
- source_labels : [ __address__, __meta_kubernetes_service_annotation_prometheus_io_port]
action : replace
regex : ([^:]+)(?::\d+)?;(\d+)
replacement : $1:$2
target_label : __address__
- action : labelmap
regex : __meta_kubernetes_service_label_(.+)
- source_labels : [ __meta_kubernetes_namespace]
action : replace
target_label : kubernetes_namespace
- source_labels : [ __meta_kubernetes_service_name]
action : replace
target_label : kubernetes_service_name
- job_name : 'kubernetes-pods'
2023-03-29 20:01:51 +00:00
scrape_interval : 120s
2022-04-04 19:08:50 +00:00
kubernetes_sd_configs :
- role : pod
relabel_configs :
- source_labels : [ __meta_kubernetes_pod_annotation_prometheus_io_scrape]
action : keep
regex : true
- source_labels : [ __meta_kubernetes_pod_annotation_prometheus_io_path]
action : replace
target_label : __metrics_path__
regex : (.+)
- source_labels : [ __address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
action : replace
regex : ([^:]+)(?::\d+)?;(\d+)
replacement : $1:$2
target_label : __address__
- action : labelmap
regex : __meta_kubernetes_pod_label_(.+)
- source_labels : [ __meta_kubernetes_namespace]
action : replace
target_label : kubernetes_namespace
- source_labels : [ __meta_kubernetes_pod_name]
action : replace
target_label : kubernetes_pod_name
2022-04-03 17:59:29 +00:00
# - job_name: kube-etcd
# kubernetes_sd_configs:
# - role: node
# scheme: https
# tls_config:
# ca_file: /etc/prometheus/secrets/etcd-client-cert/etcd-ca
# cert_file: /etc/prometheus/secrets/etcd-client-cert/etcd-client
# key_file: /etc/prometheus/secrets/etcd-client-cert/etcd-client-key
# relabel_configs:
# - action: labelmap
# regex: __meta_kubernetes_node_label_(.+)
# - source_labels: [__address__]
# action: replace
# targetLabel: __address__
# regex: ([^:;]+):(\d+)
# replacement: ${1}:2379
# - source_labels: [__meta_kubernetes_node_name]
# action: keep
# regex: .*mst.*
# - source_labels: [__meta_kubernetes_node_name]
# action: replace
# targetLabel: node
# regex: (.*)
# replacement: ${1}
# metric_relabel_configs:
# - regex: (kubernetes_io_hostname|failure_domain_beta_kubernetes_io_region|beta_kubernetes_io_os|beta_kubernetes_io_arch|beta_kubernetes_io_instance_type|failure_domain_beta_kubernetes_io_zone)
# action: labeldrop
## If additional scrape configurations are already deployed in a single secret file you can use this section.
## Expected values are the secret name and key
## Cannot be used with additionalScrapeConfigs
additionalScrapeConfigsSecret : {}
# enabled: false
# name:
# key:
## additionalPrometheusSecretsAnnotations allows to add annotations to the kubernetes secret. This can be useful
## when deploying via spinnaker to disable versioning on the secret, strategy.spinnaker.io/versioned: 'false'
additionalPrometheusSecretsAnnotations : {}
## AdditionalAlertManagerConfigs allows for manual configuration of alertmanager jobs in the form as specified
## in the official Prometheus documentation https://prometheus.io/docs/prometheus/latest/configuration/configuration/#<alertmanager_config>.
## AlertManager configurations specified are appended to the configurations generated by the Prometheus Operator.
## As AlertManager configs are appended, the user is responsible to make sure it is valid. Note that using this
## feature may expose the possibility to break upgrades of Prometheus. It is advised to review Prometheus release
## notes to ensure that no incompatible AlertManager configs are going to break Prometheus after the upgrade.
##
additionalAlertManagerConfigs : [ ]
# - consul_sd_configs:
# - server: consul.dev.test:8500
# scheme: http
# datacenter: dev
# tag_separator: ','
# services:
# - metrics-prometheus-alertmanager
## If additional alertmanager configurations are already deployed in a single secret, or you want to manage
## them separately from the helm deployment, you can use this section.
## Expected values are the secret name and key
## Cannot be used with additionalAlertManagerConfigs
additionalAlertManagerConfigsSecret : {}
# name:
# key:
## AdditionalAlertRelabelConfigs allows specifying Prometheus alert relabel configurations. Alert relabel configurations specified are appended
## to the configurations generated by the Prometheus Operator. Alert relabel configurations specified must have the form as specified in the
## official Prometheus documentation: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs.
## As alert relabel configs are appended, the user is responsible to make sure it is valid. Note that using this feature may expose the
## possibility to break upgrades of Prometheus. It is advised to review Prometheus release notes to ensure that no incompatible alert relabel
## configs are going to break Prometheus after the upgrade.
##
additionalAlertRelabelConfigs : [ ]
# - separator: ;
# regex: prometheus_replica
# replacement: $1
# action: labeldrop
## SecurityContext holds pod-level security attributes and common container settings.
## This defaults to non root user with uid 1000 and gid 2000.
## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 1000
fsGroup : 2000
## Priority class assigned to the Pods
##
priorityClassName : ""
## Thanos configuration allows configuring various aspects of a Prometheus server in a Thanos environment.
## This section is experimental, it may change significantly without deprecation notice in any release.
## This is experimental and may change significantly without backward compatibility in any release.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#thanosspec
##
thanos : {}
# secretProviderClass:
# provider: gcp
# parameters:
# secrets: |
# - resourceName: "projects/$PROJECT_ID/secrets/testsecret/versions/latest"
# fileName: "objstore.yaml"
# objectStorageConfigFile: /var/secrets/object-store.yaml
## Containers allows injecting additional containers. This is meant to allow adding an authentication proxy to a Prometheus pod.
## if using proxy extraContainer update targetPort with proxy container port
containers : [ ]
## InitContainers allows injecting additional initContainers. This is meant to allow doing some changes
## (permissions, dir tree) on mounted volumes before starting prometheus
initContainers : [ ]
## PortName to use for Prometheus.
##
portName : "http-web"
## ArbitraryFSAccessThroughSMs configures whether configuration based on a service monitor can access arbitrary files
## on the file system of the Prometheus container e.g. bearer token files.
arbitraryFSAccessThroughSMs : false
## OverrideHonorLabels if set to true overrides all user configured honor_labels. If HonorLabels is set in ServiceMonitor
## or PodMonitor to true, this overrides honor_labels to false.
overrideHonorLabels : false
## OverrideHonorTimestamps allows to globally enforce honoring timestamps in all scrape configs.
overrideHonorTimestamps : false
## IgnoreNamespaceSelectors if set to true will ignore NamespaceSelector settings from the podmonitor and servicemonitor
## configs, and they will only discover endpoints within their current namespace. Defaults to false.
ignoreNamespaceSelectors : false
## EnforcedNamespaceLabel enforces adding a namespace label of origin for each alert and metric that is user created.
## The label value will always be the namespace of the object that is being created.
## Disabled by default
enforcedNamespaceLabel : ""
## PrometheusRulesExcludedFromEnforce - list of prometheus rules to be excluded from enforcing of adding namespace labels.
## Works only if enforcedNamespaceLabel set to true. Make sure both ruleNamespace and ruleName are set for each pair
prometheusRulesExcludedFromEnforce : [ ]
## QueryLogFile specifies the file to which PromQL queries are logged. Note that this location must be writable,
## and can be persisted using an attached volume. Alternatively, the location can be set to a stdout location such
## as /dev/stdout to log querie information to the default Prometheus log stream. This is only available in versions
## of Prometheus >= 2.16.0. For more details, see the Prometheus docs (https://prometheus.io/docs/guides/query-log/)
queryLogFile : false
## EnforcedSampleLimit defines global limit on number of scraped samples that will be accepted. This overrides any SampleLimit
## set per ServiceMonitor or/and PodMonitor. It is meant to be used by admins to enforce the SampleLimit to keep overall
## number of samples/series under the desired limit. Note that if SampleLimit is lower that value will be taken instead.
enforcedSampleLimit : false
## EnforcedTargetLimit defines a global limit on the number of scraped targets. This overrides any TargetLimit set
## per ServiceMonitor or/and PodMonitor. It is meant to be used by admins to enforce the TargetLimit to keep the overall
## number of targets under the desired limit. Note that if TargetLimit is lower, that value will be taken instead, except
## if either value is zero, in which case the non-zero value will be used. If both values are zero, no limit is enforced.
enforcedTargetLimit : false
## Per-scrape limit on number of labels that will be accepted for a sample. If more than this number of labels are present
## post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus versions
## 2.27.0 and newer.
enforcedLabelLimit : false
## Per-scrape limit on length of labels name that will be accepted for a sample. If a label name is longer than this number
## post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus versions
## 2.27.0 and newer.
enforcedLabelNameLengthLimit : false
## Per-scrape limit on length of labels value that will be accepted for a sample. If a label value is longer than this
## number post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus
## versions 2.27.0 and newer.
enforcedLabelValueLengthLimit : false
## AllowOverlappingBlocks enables vertical compaction and vertical query merge in Prometheus. This is still experimental
## in Prometheus so it may change in any upcoming release.
allowOverlappingBlocks : false
additionalRulesForClusterRole : [ ]
# - apiGroups: [ "" ]
# resources:
# - nodes/proxy
# verbs: [ "get", "list", "watch" ]
additionalServiceMonitors : [ ]
## Name of the ServiceMonitor to create
##
# - name: ""
## Additional labels to set used for the ServiceMonitorSelector. Together with standard labels from
## the chart
##
# additionalLabels: {}
## Service label for use in assembling a job name of the form <label value>-<port>
## If no label is specified, the service name is used.
##
# jobLabel: ""
## labels to transfer from the kubernetes service to the target
##
# targetLabels: []
## labels to transfer from the kubernetes pods to the target
##
# podTargetLabels: []
## Label selector for services to which this ServiceMonitor applies
##
# selector: {}
## Namespaces from which services are selected
##
# namespaceSelector:
## Match any namespace
##
# any: false
## Explicit list of namespace names to select
##
# matchNames: []
## Endpoints of the selected service to be monitored
##
# endpoints: []
## Name of the endpoint's service port
## Mutually exclusive with targetPort
# - port: ""
## Name or number of the endpoint's target port
## Mutually exclusive with port
# - targetPort: ""
## File containing bearer token to be used when scraping targets
##
# bearerTokenFile: ""
## Interval at which metrics should be scraped
##
# interval: 30s
## HTTP path to scrape for metrics
##
# path: /metrics
## HTTP scheme to use for scraping
##
# scheme: http
## TLS configuration to use when scraping the endpoint
##
# tlsConfig:
## Path to the CA file
##
# caFile: ""
## Path to client certificate file
##
# certFile: ""
## Skip certificate verification
##
# insecureSkipVerify: false
## Path to client key file
##
# keyFile: ""
## Server name used to verify host name
##
# serverName: ""
additionalPodMonitors : [ ]
## Name of the PodMonitor to create
##
# - name: ""
## Additional labels to set used for the PodMonitorSelector. Together with standard labels from
## the chart
##
# additionalLabels: {}
## Pod label for use in assembling a job name of the form <label value>-<port>
## If no label is specified, the pod endpoint name is used.
##
# jobLabel: ""
## Label selector for pods to which this PodMonitor applies
##
# selector: {}
## PodTargetLabels transfers labels on the Kubernetes Pod onto the target.
##
# podTargetLabels: {}
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
# sampleLimit: 0
## Namespaces from which pods are selected
##
# namespaceSelector:
## Match any namespace
##
# any: false
## Explicit list of namespace names to select
##
# matchNames: []
## Endpoints of the selected pods to be monitored
## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#podmetricsendpoint
##
# podMetricsEndpoints: []
