apps/kube-prometheus/config/values.prometheus.yaml

commonLabels:
  prometheus: default

admin:
  existingSecret: grafana-admin-credentials
  userKey: user
  passwordKey: password

defaultRules:
  rules:
    etcd: false

prometheus:
  prometheusSpec:
    retention: 7d
    nodeSelector:
      kubernetes.io/arch: arm64
    serviceMonitorNamespaceSelector:
      matchLabels:
        prometheus: default
    serviceMonitorSelector:
      matchLabels:
        prometheus: default
    ruleSelector:
      matchLabels:
        prometheus: default
    ruleNamespaceSelector:
      matchLabels:
        prometheus: default
    podMonitorSelector:
      matchLabels:
        prometheus: default
    podMonitorNamespaceSelector:
      matchLabels:
        prometheus: default
    resources:
      requests:
        memory: 3Gi
        cpu: 500m
      limits:
        memory: 4Gi
        cpu: 800m
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: hcloud-volumes
          resources:
            requests:
              storage: 15Gi

alertmanager:
  enabled: false

kubeEtcd:
  enabled: false

kubeControllerManager:
  enabled: true
  endpoints: ["172.23.2.10"]
  service:
    enabled: true
    port: 10257
    targetPort: 10257
  serviceMonitor:
    enabled: true
    https: true

kubeScheduler:
  enabled: false
  endpoints: ["172.23.2.10"]
  service:
    enabled: true
    port: 10259
    targetPort: 10259
  serviceMonitor:
    enabled: true
    https: true

kubeProxy:
  enabled: false
  endpoints: ["172.23.2.10"]
  service:
    enabled: true
    port: 10249
    targetPort: 10249

grafana:
  ingress:
    enabled: false
  envFromSecrets:
    - name: grafana-auth
    - name: grafana-db
  grafana.ini:
    server:
      domain: grafana.icb4dc0.de
      root_url: "https://%(domain)s"
    database:
      type: postgres
      host: default-cluster-primary.postgres.svc:5432
      name: grafana
      user: "${GF_DB_USER}"
      password: "${GF_DB_PASSWORD}"
      ssl_mode: require
    auth:
      disable_login_form: true
    auth.generic_oauth:
      name: Forgejo
      icon: signin
      enabled: "true"
      client_id: "${GF_OAUTH_CLIENT_ID}"
      client_secret: "${GF_OAUTH_CLIENT_SECRET}"
      empty_scopes: true
      auth_url: https://code.icb4dc0.de/login/oauth/authorize
      token_url: https://code.icb4dc0.de/login/oauth/access_token
      api_url: https://code.icb4dc0.de/login/oauth/userinfo
      skip_org_role_sync: true
  persistence:
    enabled: false
    storageClassName: hcloud-volumes
  service:
    port: 3000

prometheus-node-exporter:
  prometheus:
    monitor:
      additionalLabels:
        prometheus: default

kube-state-metrics:
  prometheus:
    monitor:
      additionalLabels:
        prometheus: default