2020-12-18 00:46:15 +00:00
# Default values for kube-prometheus-stack.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
## Provide a name in place of kube-prometheus-stack for `app:` labels
##
nameOverride : ""
## Override the deployment namespace
##
namespaceOverride : ""
2023-11-27 12:45:06 +00:00
## Provide a k8s version to auto dashboard import script example: kubeTargetVersionOverride: 1.26.6
2020-12-18 00:46:15 +00:00
##
kubeTargetVersionOverride : ""
2021-05-11 08:07:38 +00:00
## Allow kubeVersion to be overridden while creating the ingress
##
kubeVersionOverride : ""
2020-12-18 00:46:15 +00:00
## Provide a name to substitute for the full names of resources
##
fullnameOverride : ""
## Labels to apply to all resources
##
commonLabels : {}
# scmhash: abc123
# myLabel: aakkmd
2023-08-22 13:42:24 +00:00
## Install Prometheus Operator CRDs
##
crds :
enabled : true
2024-04-04 13:39:36 +00:00
## custom Rules to override "for" and "severity" in defaultRules
##
customRules : {}
# AlertmanagerFailedReload:
# for: 3m
# AlertmanagerMembersInconsistent:
# for: 5m
# severity: "warning"
2020-12-18 00:46:15 +00:00
## Create default rules for monitoring the cluster
##
defaultRules :
create : true
rules :
alertmanager : true
etcd : true
2022-01-28 16:19:41 +00:00
configReloaders : true
2020-12-18 00:46:15 +00:00
general : true
2023-11-27 12:45:06 +00:00
k8sContainerCpuUsageSecondsTotal : true
k8sContainerMemoryCache : true
k8sContainerMemoryRss : true
k8sContainerMemorySwap : true
k8sContainerResource : true
2024-04-04 13:39:36 +00:00
k8sContainerMemoryWorkingSetBytes : true
2023-11-27 12:45:06 +00:00
k8sPodOwner : true
2020-12-18 00:46:15 +00:00
kubeApiserverAvailability : true
2022-08-24 15:13:39 +00:00
kubeApiserverBurnrate : true
kubeApiserverHistogram : true
2020-12-18 00:46:15 +00:00
kubeApiserverSlos : true
2022-08-24 15:13:39 +00:00
kubeControllerManager : true
2020-12-18 00:46:15 +00:00
kubelet : true
2022-01-28 16:19:41 +00:00
kubeProxy : true
2020-12-18 00:46:15 +00:00
kubePrometheusGeneral : true
kubePrometheusNodeRecording : true
kubernetesApps : true
kubernetesResources : true
kubernetesStorage : true
kubernetesSystem : true
2022-10-27 12:27:42 +00:00
kubeSchedulerAlerting : true
kubeSchedulerRecording : true
2020-12-18 00:46:15 +00:00
kubeStateMetrics : true
network : true
node : true
2022-01-28 16:19:41 +00:00
nodeExporterAlerting : true
nodeExporterRecording : true
2020-12-18 00:46:15 +00:00
prometheus : true
prometheusOperator : true
2023-08-22 13:42:24 +00:00
windows : true
2020-12-18 00:46:15 +00:00
## Reduce app namespace alert scope
appNamespacesTarget : ".*"
2023-11-27 12:45:06 +00:00
## Set keep_firing_for for all alerts
keepFiringFor : ""
2020-12-18 00:46:15 +00:00
## Labels for default rules
labels : {}
## Annotations for default rules
annotations : {}
## Additional labels for PrometheusRule alerts
additionalRuleLabels : {}
2022-08-24 15:13:39 +00:00
## Additional annotations for PrometheusRule alerts
additionalRuleAnnotations : {}
2023-08-22 13:42:24 +00:00
## Additional labels for specific PrometheusRule alert groups
additionalRuleGroupLabels :
alertmanager : {}
etcd : {}
configReloaders : {}
general : {}
2023-11-27 12:45:06 +00:00
k8sContainerCpuUsageSecondsTotal : {}
k8sContainerMemoryCache : {}
k8sContainerMemoryRss : {}
k8sContainerMemorySwap : {}
k8sContainerResource : {}
k8sPodOwner : {}
2023-08-22 13:42:24 +00:00
kubeApiserverAvailability : {}
kubeApiserverBurnrate : {}
kubeApiserverHistogram : {}
kubeApiserverSlos : {}
kubeControllerManager : {}
kubelet : {}
kubeProxy : {}
kubePrometheusGeneral : {}
kubePrometheusNodeRecording : {}
kubernetesApps : {}
kubernetesResources : {}
kubernetesStorage : {}
kubernetesSystem : {}
kubeSchedulerAlerting : {}
kubeSchedulerRecording : {}
kubeStateMetrics : {}
network : {}
node : {}
nodeExporterAlerting : {}
nodeExporterRecording : {}
prometheus : {}
prometheusOperator : {}
## Additional annotations for specific PrometheusRule alerts groups
additionalRuleGroupAnnotations :
alertmanager : {}
etcd : {}
configReloaders : {}
general : {}
2023-11-27 12:45:06 +00:00
k8sContainerCpuUsageSecondsTotal : {}
k8sContainerMemoryCache : {}
k8sContainerMemoryRss : {}
k8sContainerMemorySwap : {}
k8sContainerResource : {}
k8sPodOwner : {}
2023-08-22 13:42:24 +00:00
kubeApiserverAvailability : {}
kubeApiserverBurnrate : {}
kubeApiserverHistogram : {}
kubeApiserverSlos : {}
kubeControllerManager : {}
kubelet : {}
kubeProxy : {}
kubePrometheusGeneral : {}
kubePrometheusNodeRecording : {}
kubernetesApps : {}
kubernetesResources : {}
kubernetesStorage : {}
kubernetesSystem : {}
kubeSchedulerAlerting : {}
kubeSchedulerRecording : {}
kubeStateMetrics : {}
network : {}
node : {}
nodeExporterAlerting : {}
nodeExporterRecording : {}
prometheus : {}
prometheusOperator : {}
2023-11-27 12:45:06 +00:00
additionalAggregationLabels : [ ]
2022-01-28 16:19:41 +00:00
## Prefix for runbook URLs. Use this to override the first part of the runbookURLs that is common to all rules.
runbookUrl : "https://runbooks.prometheus-operator.dev/runbooks"
## Disabled PrometheusRule alerts
disabled : {}
# KubeAPIDown: true
# NodeRAIDDegraded: true
2020-12-18 00:46:15 +00:00
## Deprecated way to provide custom recording or alerting rules to be deployed into the cluster.
##
# additionalPrometheusRules: []
# - name: my-rule-file
# groups:
# - name: my_group
# rules:
# - record: my_record
# expr: 100 * my_record
## Provide custom recording or alerting rules to be deployed into the cluster.
##
additionalPrometheusRulesMap : {}
# rule-name:
# groups:
# - name: my_group
# rules:
# - record: my_record
# expr: 100 * my_record
##
global :
rbac :
create : true
2022-04-08 15:08:28 +00:00
## Create ClusterRoles that extend the existing view, edit and admin ClusterRoles to interact with prometheus-operator CRDs
## Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles
createAggregateClusterRoles : false
2022-01-28 16:19:41 +00:00
pspEnabled : false
2020-12-18 00:46:15 +00:00
pspAnnotations : {}
## Specify pod annotations
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
##
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
2022-12-06 20:43:11 +00:00
## Global image registry to use if it needs to be overriden for some specific use cases (e.g local registries, custom images, ...)
##
imageRegistry : ""
2020-12-18 00:46:15 +00:00
## Reference to one or more secrets to be used when pulling images
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
##
imagePullSecrets : [ ]
# - name: "image-pull-secret"
2022-08-24 15:13:39 +00:00
# or
# - "image-pull-secret"
2020-12-18 00:46:15 +00:00
2023-08-22 13:42:24 +00:00
windowsMonitoring :
2023-11-27 12:45:06 +00:00
## Deploys the windows-exporter and Windows-specific dashboards and rules (job name must be 'windows-exporter')
2023-08-22 13:42:24 +00:00
enabled : false
2023-11-27 12:45:06 +00:00
## Configuration for prometheus-windows-exporter
## ref: https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-windows-exporter
##
prometheus-windows-exporter :
## Enable ServiceMonitor and set Kubernetes label to use as a job label
##
prometheus :
monitor :
enabled : true
jobLabel : jobLabel
2024-04-04 13:39:36 +00:00
releaseLabel : true
2023-11-27 12:45:06 +00:00
## Set job label to 'windows-exporter' as required by the default Prometheus rules and Grafana dashboards
##
podLabels :
jobLabel : windows-exporter
## Enable memory and container metrics as required by the default Prometheus rules and Grafana dashboards
##
config : |-
collectors :
enabled : '[defaults],memory,container'
2023-08-22 13:42:24 +00:00
2020-12-18 00:46:15 +00:00
## Configuration for alertmanager
## ref: https://prometheus.io/docs/alerting/alertmanager/
##
alertmanager :
## Deploy alertmanager
##
enabled : true
2021-04-15 13:03:52 +00:00
## Annotations for Alertmanager
##
annotations : {}
2020-12-18 00:46:15 +00:00
## Api that prometheus will use to communicate with alertmanager. Possible values are v1, v2
##
apiVersion : v2
## Service account for Alertmanager to use.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
create : true
name : ""
annotations : {}
2023-05-13 08:38:33 +00:00
automountServiceAccountToken : true
2020-12-18 00:46:15 +00:00
## Configure pod disruption budgets for Alertmanager
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/#specifying-a-poddisruptionbudget
##
podDisruptionBudget :
enabled : false
minAvailable : 1
maxUnavailable : ""
## Alertmanager configuration directives
## ref: https://prometheus.io/docs/alerting/configuration/#configuration-file
## https://prometheus.io/webtools/alerting/routing-tree-editor/
##
config :
global :
resolve_timeout : 5m
2022-08-24 15:13:39 +00:00
inhibit_rules :
- source_matchers :
- 'severity = critical'
target_matchers :
- 'severity =~ warning|info'
equal :
- 'namespace'
- 'alertname'
- source_matchers :
- 'severity = warning'
target_matchers :
- 'severity = info'
equal :
- 'namespace'
- 'alertname'
- source_matchers :
- 'alertname = InfoInhibitor'
target_matchers :
- 'severity = info'
equal :
- 'namespace'
2024-04-04 13:39:36 +00:00
- target_matchers :
- 'alertname = InfoInhibitor'
2020-12-18 00:46:15 +00:00
route :
2022-08-24 15:13:39 +00:00
group_by : [ 'namespace' ]
2020-12-18 00:46:15 +00:00
group_wait : 30s
group_interval : 5m
repeat_interval : 12h
receiver : 'null'
routes :
2022-08-24 15:13:39 +00:00
- receiver : 'null'
matchers :
2024-04-04 13:39:36 +00:00
- alertname = "Watchdog"
2020-12-18 00:46:15 +00:00
receivers :
- name : 'null'
2021-02-26 21:25:43 +00:00
templates :
- '/etc/alertmanager/config/*.tmpl'
2020-12-18 00:46:15 +00:00
2023-04-14 10:44:57 +00:00
## Alertmanager configuration directives (as string type, preferred over the config hash map)
## stringConfig will be used only, if tplConfig is true
## ref: https://prometheus.io/docs/alerting/configuration/#configuration-file
## https://prometheus.io/webtools/alerting/routing-tree-editor/
##
stringConfig : ""
2020-12-18 00:46:15 +00:00
## Pass the Alertmanager configuration directives through Helm's templating
## engine. If the Alertmanager configuration contains Alertmanager templates,
## they'll need to be properly escaped so that they are not interpreted by
## Helm
## ref: https://helm.sh/docs/developing_charts/#using-the-tpl-function
## https://prometheus.io/docs/alerting/configuration/#tmpl_string
## https://prometheus.io/docs/alerting/notifications/
## https://prometheus.io/docs/alerting/notification_examples/
tplConfig : false
## Alertmanager template files to format alerts
2021-02-26 21:25:43 +00:00
## By default, templateFiles are placed in /etc/alertmanager/config/ and if
## they have a .tmpl file suffix will be loaded. See config.templates above
## to change, add other suffixes. If adding other suffixes, be sure to update
## config.templates above to include those suffixes.
2020-12-18 00:46:15 +00:00
## ref: https://prometheus.io/docs/alerting/notifications/
## https://prometheus.io/docs/alerting/notification_examples/
##
templateFiles : {}
#
## An example template:
# template_1.tmpl: |-
# {{ define "cluster" }}{{ .ExternalURL | reReplaceAll ".*alertmanager\\.(.*)" "$1" }}{{ end }}
#
# {{ define "slack.myorg.text" }}
# {{- $root := . -}}
# {{ range .Alerts }}
# *Alert:* {{ .Annotations.summary }} - `{{ .Labels.severity }}`
2021-08-25 13:59:17 +00:00
# *Cluster:* {{ template "cluster" $root }}
2020-12-18 00:46:15 +00:00
# *Description:* {{ .Annotations.description }}
# *Graph:* <{{ .GeneratorURL }}|:chart_with_upwards_trend:>
# *Runbook:* <{{ .Annotations.runbook }}|:spiral_note_pad:>
# *Details:*
2021-04-15 13:03:52 +00:00
# {{ range .Labels.SortedPairs }} - *{{ .Name }}:* `{{ .Value }}`
2020-12-18 00:46:15 +00:00
# {{ end }}
# {{ end }}
# {{ end }}
ingress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
2023-08-22 13:42:24 +00:00
## Override ingress to a different defined port on the service
2022-08-24 15:13:39 +00:00
# servicePort: 8081
2023-08-22 13:42:24 +00:00
## Override ingress to a different service then the default, this is useful if you need to
## point to a specific instance of the alertmanager (eg kube-prometheus-stack-alertmanager-0)
# serviceName: kube-prometheus-stack-alertmanager-0
2022-08-24 15:13:39 +00:00
2020-12-18 00:46:15 +00:00
## Hosts must be provided if Ingress is enabled.
##
hosts : [ ]
# - alertmanager.domain.com
## Paths to use for ingress rules - one path should match the alertmanagerSpec.routePrefix
##
paths : [ ]
# - /
2021-02-26 21:25:43 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
2020-12-18 00:46:15 +00:00
## TLS configuration for Alertmanager Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: alertmanager-general-tls
# hosts:
# - alertmanager.example.com
## Configuration for Alertmanager secret
##
secret :
annotations : {}
## Configuration for creating an Ingress that will map to each Alertmanager replica service
## alertmanager.servicePerReplica must be enabled
##
ingressPerReplica :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
## Final form of the hostname for each per replica ingress is
## {{ ingressPerReplica.hostPrefix }}-{{ $replicaNumber }}.{{ ingressPerReplica.hostDomain }}
##
## Prefix for the per replica ingress that will have `-$replicaNumber`
## appended to the end
hostPrefix : ""
## Domain that will be used for the per replica ingress
hostDomain : ""
## Paths to use for ingress rules
##
paths : [ ]
# - /
2021-02-26 21:25:43 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
2020-12-18 00:46:15 +00:00
## Secret name containing the TLS certificate for alertmanager per replica ingress
## Secret must be manually created in the namespace
tlsSecretName : ""
## Separated secret for each per replica Ingress. Can be used together with cert-manager
##
tlsSecretPerReplica :
enabled : false
## Final form of the secret for each per replica ingress is
## {{ tlsSecretPerReplica.prefix }}-{{ $replicaNumber }}
##
prefix : "alertmanager"
## Configuration for Alertmanager service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port for Alertmanager Service to listen on
##
port : 9093
## To be used with a proxy extraContainer port
##
targetPort : 9093
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30903
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
## Additional ports to open for Alertmanager service
2023-11-27 12:45:06 +00:00
##
2020-12-18 00:46:15 +00:00
additionalPorts : [ ]
2023-11-27 12:45:06 +00:00
# - name: oauth-proxy
2022-08-24 15:13:39 +00:00
# port: 8081
# targetPort: 8081
2023-11-27 12:45:06 +00:00
# - name: oauth-metrics
# port: 8082
# targetPort: 8082
2020-12-18 00:46:15 +00:00
externalIPs : [ ]
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2023-08-22 13:42:24 +00:00
## If you want to make sure that connections from a particular client are passed to the same Pod each time
2024-04-04 13:39:36 +00:00
## Accepts 'ClientIP' or 'None'
2023-08-22 13:42:24 +00:00
##
2024-04-04 13:39:36 +00:00
sessionAffinity : None
## If you want to modify the ClientIP sessionAffinity timeout
## The value must be >0 && <=86400(for 1 day) if ServiceAffinity == "ClientIP"
##
sessionAffinityConfig :
clientIP :
timeoutSeconds : 10800
2023-08-22 13:42:24 +00:00
2020-12-18 00:46:15 +00:00
## Service type
##
type : ClusterIP
## Configuration for creating a separate Service for each statefulset Alertmanager replica
##
servicePerReplica :
enabled : false
annotations : {}
## Port for Alertmanager Service per replica to listen on
##
port : 9093
## To be used with a proxy extraContainer port
targetPort : 9093
## Port to expose on each node
## Only used if servicePerReplica.type is 'NodePort'
##
nodePort : 30904
## Loadbalancer source IP ranges
2021-03-22 09:23:27 +00:00
## Only used if servicePerReplica.type is "LoadBalancer"
2020-12-18 00:46:15 +00:00
loadBalancerSourceRanges : [ ]
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2020-12-18 00:46:15 +00:00
## Service type
##
type : ClusterIP
2024-04-04 13:39:36 +00:00
## Configuration for creating a ServiceMonitor for AlertManager
2020-12-18 00:46:15 +00:00
##
serviceMonitor :
2024-04-04 13:39:36 +00:00
## If true, a ServiceMonitor will be created for the AlertManager service.
##
selfMonitor : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## Additional labels
##
additionalLabels : {}
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
2022-10-27 12:27:42 +00:00
## enableHttp2: Whether to enable HTTP2.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#endpoint
2022-12-06 20:43:11 +00:00
enableHttp2 : true
2022-10-27 12:27:42 +00:00
2020-12-18 00:46:15 +00:00
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
2022-01-28 16:19:41 +00:00
## Of type: https://github.com/coreos/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
2020-12-18 00:46:15 +00:00
tlsConfig : {}
bearerTokenFile :
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2023-11-27 12:45:06 +00:00
## Additional Endpoints
##
additionalEndpoints : [ ]
# - port: oauth-metrics
# path: /metrics
2020-12-18 00:46:15 +00:00
## Settings affecting alertmanagerSpec
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#alertmanagerspec
2020-12-18 00:46:15 +00:00
##
alertmanagerSpec :
2021-04-15 13:03:52 +00:00
## Standard object's metadata. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata
2020-12-18 00:46:15 +00:00
## Metadata Labels and Annotations gets propagated to the Alertmanager pods.
##
podMetadata : {}
## Image of Alertmanager
##
image :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : prometheus/alertmanager
2024-04-04 13:39:36 +00:00
tag : v0.27.0
2020-12-18 00:46:15 +00:00
sha : ""
## If true then the user will be responsible to provide a secret with alertmanager configuration
## So when true the config part will be ignored (including templateFiles) and the one in the secret will be used
##
useExistingSecret : false
## Secrets is a list of Secrets in the same namespace as the Alertmanager object, which shall be mounted into the
## Alertmanager Pods. The Secrets are mounted into /etc/alertmanager/secrets/.
##
secrets : [ ]
2024-04-04 13:39:36 +00:00
## If false then the user will opt out of automounting API credentials.
##
automountServiceAccountToken : true
2020-12-18 00:46:15 +00:00
## ConfigMaps is a list of ConfigMaps in the same namespace as the Alertmanager object, which shall be mounted into the Alertmanager Pods.
## The ConfigMaps are mounted into /etc/alertmanager/configmaps/.
##
configMaps : [ ]
## ConfigSecret is the name of a Kubernetes Secret in the same namespace as the Alertmanager object, which contains configuration for
## this Alertmanager instance. Defaults to 'alertmanager-' The secret is mounted into /etc/alertmanager/config.
##
# configSecret:
2022-08-24 15:13:39 +00:00
## WebTLSConfig defines the TLS parameters for HTTPS
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#alertmanagerwebspec
web : {}
2020-12-18 00:46:15 +00:00
## AlertmanagerConfigs to be selected to merge and configure Alertmanager with.
##
alertmanagerConfigSelector : {}
## Example which selects all alertmanagerConfig resources
## with label "alertconfig" with values any of "example-config" or "example-config-2"
# alertmanagerConfigSelector:
# matchExpressions:
# - key: alertconfig
# operator: In
# values:
# - example-config
# - example-config-2
#
## Example which selects all alertmanagerConfig resources with label "role" set to "example-config"
# alertmanagerConfigSelector:
# matchLabels:
# role: example-config
## Namespaces to be selected for AlertmanagerConfig discovery. If nil, only check own namespace.
##
alertmanagerConfigNamespaceSelector : {}
## Example which selects all namespaces
## with label "alertmanagerconfig" with values any of "example-namespace" or "example-namespace-2"
# alertmanagerConfigNamespaceSelector:
# matchExpressions:
# - key: alertmanagerconfig
# operator: In
# values:
# - example-namespace
# - example-namespace-2
## Example which selects all namespaces with label "alertmanagerconfig" set to "enabled"
# alertmanagerConfigNamespaceSelector:
# matchLabels:
# alertmanagerconfig: enabled
2022-04-08 15:08:28 +00:00
## AlermanagerConfig to be used as top level configuration
##
alertmanagerConfiguration : {}
2022-08-24 15:13:39 +00:00
## Example with select a global alertmanagerconfig
# alertmanagerConfiguration:
# name: global-alertmanager-Configuration
2022-04-08 15:08:28 +00:00
2023-04-14 10:44:57 +00:00
## Defines the strategy used by AlertmanagerConfig objects to match alerts. eg:
##
alertmanagerConfigMatcherStrategy : {}
## Example with use OnNamespace strategy
# alertmanagerConfigMatcherStrategy:
# type: OnNamespace
2020-12-18 00:46:15 +00:00
## Define Log Format
# Use logfmt (default) or json logging
logFormat : logfmt
## Log level for Alertmanager to be configured with.
##
logLevel : info
## Size is the expected size of the alertmanager cluster. The controller will eventually make the size of the
## running cluster equal to the expected size.
replicas : 1
## Time duration Alertmanager shall retain data for. Default is '120h', and must match the regular expression
## [0-9]+(ms|s|m|h) (milliseconds seconds minutes hours).
##
retention : 120h
## Storage is the definition of how storage will be used by the Alertmanager instances.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/storage.md
2020-12-18 00:46:15 +00:00
##
storage : {}
# volumeClaimTemplate:
# spec:
# storageClassName: gluster
# accessModes: ["ReadWriteOnce"]
# resources:
# requests:
# storage: 50Gi
2022-08-24 15:13:39 +00:00
# selector: {}
2020-12-18 00:46:15 +00:00
2021-08-25 13:59:17 +00:00
## The external URL the Alertmanager instances will be available under. This is necessary to generate correct URLs. This is necessary if Alertmanager is not served from root of a DNS name. string false
2020-12-18 00:46:15 +00:00
##
externalUrl :
2021-08-25 13:59:17 +00:00
## The route prefix Alertmanager registers HTTP handlers for. This is useful, if using ExternalURL and a proxy is rewriting HTTP routes of a request, and the actual ExternalURL is still true,
2020-12-18 00:46:15 +00:00
## but the server serves requests under a different route prefix. For example for use with kubectl proxy.
##
routePrefix : /
2023-08-22 13:42:24 +00:00
## scheme: HTTP scheme to use. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when connect to the endpoint. For example if using istio mTLS.
## Of type: https://github.com/coreos/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
tlsConfig : {}
2020-12-18 00:46:15 +00:00
## If set to true all actions on the underlying managed objects are not going to be performed, except for delete actions.
##
paused : false
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Define resources requests and limits for single Pods.
## ref: https://kubernetes.io/docs/user-guide/compute-resources/
##
resources : {}
# requests:
# memory: 400Mi
## Pod anti-affinity can prevent the scheduler from placing Prometheus replicas on the same node.
## The default value "soft" means that the scheduler should *prefer* to not schedule two replica pods onto the same node but no guarantee is provided.
## The value "hard" means that the scheduler is *required* to not schedule two replica pods onto the same node.
## The value "" will disable pod anti-affinity so that no anti-affinity rules will be configured.
##
podAntiAffinity : ""
## If anti-affinity is enabled sets the topologyKey to use for anti-affinity.
## This can be changed to, for example, failure-domain.beta.kubernetes.io/zone
##
podAntiAffinityTopologyKey : kubernetes.io/hostname
## Assign custom affinity rules to the alertmanager instance
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
## If specified, the pod's tolerations.
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
2021-02-26 21:25:43 +00:00
## If specified, the pod's topology spread constraints.
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
##
topologySpreadConstraints : [ ]
# - maxSkew: 1
# topologyKey: topology.kubernetes.io/zone
# whenUnsatisfiable: DoNotSchedule
# labelSelector:
# matchLabels:
# app: alertmanager
2020-12-18 00:46:15 +00:00
## SecurityContext holds pod-level security attributes and common container settings.
2021-08-25 13:59:17 +00:00
## This defaults to non root user with uid 1000 and gid 2000. *v1.PodSecurityContext false
2020-12-18 00:46:15 +00:00
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 1000
fsGroup : 2000
2023-08-22 13:42:24 +00:00
seccompProfile :
type : RuntimeDefault
2020-12-18 00:46:15 +00:00
## ListenLocal makes the Alertmanager server listen on loopback, so that it does not bind against the Pod IP.
## Note this is only for the Alertmanager UI, not the gossip communication.
##
listenLocal : false
## Containers allows injecting additional containers. This is meant to allow adding an authentication proxy to an Alertmanager pod.
##
containers : [ ]
2022-08-24 15:13:39 +00:00
# containers:
# - name: oauth-proxy
2023-11-27 12:45:06 +00:00
# image: quay.io/oauth2-proxy/oauth2-proxy:v7.5.1
2022-08-24 15:13:39 +00:00
# args:
# - --upstream=http://127.0.0.1:9093
# - --http-address=0.0.0.0:8081
2023-11-27 12:45:06 +00:00
# - --metrics-address=0.0.0.0:8082
2022-08-24 15:13:39 +00:00
# - ...
# ports:
# - containerPort: 8081
# name: oauth-proxy
# protocol: TCP
2023-11-27 12:45:06 +00:00
# - containerPort: 8082
# name: oauth-metrics
# protocol: TCP
2022-08-24 15:13:39 +00:00
# resources: {}
2020-12-18 00:46:15 +00:00
# Additional volumes on the output StatefulSet definition.
volumes : [ ]
# Additional VolumeMounts on the output StatefulSet definition.
volumeMounts : [ ]
## InitContainers allows injecting additional initContainers. This is meant to allow doing some changes
## (permissions, dir tree) on mounted volumes before starting prometheus
initContainers : [ ]
## Priority class assigned to the Pods
##
priorityClassName : ""
## AdditionalPeers allows injecting a set of additional Alertmanagers to peer with to form a highly available cluster.
##
additionalPeers : [ ]
## PortName to use for Alert Manager.
##
2021-12-09 18:03:55 +00:00
portName : "http-web"
2020-12-18 00:46:15 +00:00
## ClusterAdvertiseAddress is the explicit address to advertise in cluster. Needs to be provided for non RFC1918 [1] (public) addresses. [1] RFC1918: https://tools.ietf.org/html/rfc1918
##
clusterAdvertiseAddress : false
2023-08-22 13:42:24 +00:00
## clusterGossipInterval determines interval between gossip attempts.
## Needs to be specified as GoDuration, a time duration that can be parsed by Go’ s time.ParseDuration() (e.g. 45ms, 30s, 1m, 1h20m15s)
clusterGossipInterval : ""
## clusterPeerTimeout determines timeout for cluster peering.
## Needs to be specified as GoDuration, a time duration that can be parsed by Go’ s time.ParseDuration() (e.g. 45ms, 30s, 1m, 1h20m15s)
clusterPeerTimeout : ""
## clusterPushpullInterval determines interval between pushpull attempts.
## Needs to be specified as GoDuration, a time duration that can be parsed by Go’ s time.ParseDuration() (e.g. 45ms, 30s, 1m, 1h20m15s)
clusterPushpullInterval : ""
2020-12-18 00:46:15 +00:00
## ForceEnableClusterMode ensures Alertmanager does not deactivate the cluster mode when running with a single replica.
## Use case is e.g. spanning an Alertmanager cluster across Kubernetes clusters with a single replica in each.
forceEnableClusterMode : false
2022-10-27 12:27:42 +00:00
## Minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to
## be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).
minReadySeconds : 0
2023-11-27 12:45:06 +00:00
## Additional configuration which is not covered by the properties above. (passed through tpl)
additionalConfig : {}
## Additional configuration which is not covered by the properties above.
## Useful, if you need advanced templating inside alertmanagerSpec.
## Otherwise, use alertmanager.alertmanagerSpec.additionalConfig (passed through tpl)
additionalConfigString : ""
2021-08-25 13:59:17 +00:00
## ExtraSecret can be used to store various data in an extra secret
## (use it for example to store hashed basic auth credentials)
extraSecret :
## if not set, name will be auto generated
# name: ""
annotations : {}
data : {}
# auth: |
# foo:$apr1$OFG3Xybp$ckL0FHDAkoXYIlH9.cysT0
# someoneelse:$apr1$DMZX2Z4q$6SbQIfyuLQd.xmo/P0m2c.
2020-12-18 00:46:15 +00:00
## Using default values from https://github.com/grafana/helm-charts/blob/main/charts/grafana/values.yaml
##
grafana :
enabled : true
namespaceOverride : ""
2021-06-30 16:26:06 +00:00
## ForceDeployDatasources Create datasource configmap even if grafana deployment has been disabled
##
forceDeployDatasources : false
## ForceDeployDashboard Create dashboard configmap even if grafana deployment has been disabled
##
forceDeployDashboards : false
2021-09-27 15:34:47 +00:00
## Deploy default dashboards
2020-12-18 00:46:15 +00:00
##
defaultDashboardsEnabled : true
2021-09-27 15:34:47 +00:00
## Timezone for the default dashboards
## Other options are: browser or a specific timezone, i.e. Europe/Luxembourg
##
defaultDashboardsTimezone : utc
2024-04-04 13:39:36 +00:00
## Editable flag for the default dashboards
##
defaultDashboardsEditable : true
2020-12-18 00:46:15 +00:00
adminPassword : prom-operator
2022-01-28 16:19:41 +00:00
rbac :
## If true, Grafana PSPs will be created
##
pspEnabled : false
2020-12-18 00:46:15 +00:00
ingress :
## If true, Grafana Ingress will be created
##
enabled : false
2022-04-08 15:08:28 +00:00
## IngressClassName for Grafana Ingress.
## Should be provided if Ingress is enable.
##
# ingressClassName: nginx
2020-12-18 00:46:15 +00:00
## Annotations for Grafana Ingress
##
annotations : {}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
## Labels to be added to the Ingress
##
labels : {}
## Hostnames.
## Must be provided if Ingress is enable.
##
# hosts:
# - grafana.domain.com
hosts : [ ]
## Path for grafana ingress
path : /
## TLS configuration for grafana Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: grafana-general-tls
# hosts:
# - grafana.example.com
2024-04-04 13:39:36 +00:00
# # To make Grafana persistent (Using Statefulset)
# #
# persistence:
# enabled: true
# type: sts
# storageClassName: "storageClassName"
# accessModes:
# - ReadWriteOnce
# size: 20Gi
# finalizers:
# - kubernetes.io/pvc-protection
serviceAccount :
create : true
autoMount : true
2020-12-18 00:46:15 +00:00
sidecar :
dashboards :
enabled : true
label : grafana_dashboard
2022-04-08 15:08:28 +00:00
labelValue : "1"
2023-05-13 08:38:33 +00:00
# Allow discovery in all namespaces for dashboards
searchNamespace : ALL
2020-12-18 00:46:15 +00:00
2024-04-04 13:39:36 +00:00
# Support for new table panels, when enabled grafana auto migrates the old table panels to newer table panels
enableNewTablePanelSyntax : false
2020-12-18 00:46:15 +00:00
## Annotations for Grafana dashboard configmaps
##
annotations : {}
2021-08-25 13:59:17 +00:00
multicluster :
global :
enabled : false
etcd :
enabled : false
2021-09-08 14:10:36 +00:00
provider :
allowUiUpdates : false
2020-12-18 00:46:15 +00:00
datasources :
enabled : true
defaultDatasourceEnabled : true
2023-01-11 12:08:18 +00:00
isDefaultDatasource : true
2020-12-18 00:46:15 +00:00
2022-04-08 15:08:28 +00:00
uid : prometheus
2021-06-30 16:26:06 +00:00
## URL of prometheus datasource
##
# url: http://prometheus-stack-prometheus:9090/
2023-05-13 08:38:33 +00:00
## Prometheus request timeout in seconds
# timeout: 30
2021-02-26 21:25:43 +00:00
# If not defined, will use prometheus.prometheusSpec.scrapeInterval or its default
# defaultDatasourceScrapeInterval: 15s
2020-12-18 00:46:15 +00:00
## Annotations for Grafana datasource configmaps
##
annotations : {}
2023-05-13 08:38:33 +00:00
## Set method for HTTP to send query to datasource
httpMethod : POST
2020-12-18 00:46:15 +00:00
## Create datasource for each Pod of Prometheus StatefulSet;
## this uses headless service `prometheus-operated` which is
## created by Prometheus Operator
2022-08-24 15:13:39 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/0fee93e12dc7c2ea1218f19ae25ec6b893460590/pkg/prometheus/statefulset.go#L255-L286
2020-12-18 00:46:15 +00:00
createPrometheusReplicasDatasources : false
label : grafana_datasource
2022-04-08 15:08:28 +00:00
labelValue : "1"
2020-12-18 00:46:15 +00:00
2022-08-24 15:13:39 +00:00
## Field with internal link pointing to existing data source in Grafana.
## Can be provisioned via additionalDataSources
exemplarTraceIdDestinations : {}
# datasourceUid: Jaeger
# traceIdLabelName: trace_id
2023-08-22 13:42:24 +00:00
alertmanager :
enabled : true
uid : alertmanager
handleGrafanaManagedAlerts : false
implementation : prometheus
2022-08-24 15:13:39 +00:00
2020-12-18 00:46:15 +00:00
extraConfigmapMounts : [ ]
# - name: certs-configmap
# mountPath: /etc/grafana/ssl/
# configMap: certs-configmap
# readOnly: true
2021-12-09 18:03:55 +00:00
deleteDatasources : [ ]
# - name: example-datasource
# orgId: 1
2020-12-18 00:46:15 +00:00
## Configure additional grafana datasources (passed through tpl)
## ref: http://docs.grafana.org/administration/provisioning/#datasources
additionalDataSources : [ ]
# - name: prometheus-sample
# access: proxy
# basicAuth: true
# basicAuthPassword: pass
# basicAuthUser: daco
# editable: false
# jsonData:
# tlsSkipVerify: true
# orgId: 1
# type: prometheus
# url: https://{{ printf "%s-prometheus.svc" .Release.Name }}:9090
# version: 1
## Passed to grafana subchart and used by servicemonitor below
##
service :
2021-12-09 18:03:55 +00:00
portName : http-web
2020-12-18 00:46:15 +00:00
serviceMonitor :
2022-04-08 15:08:28 +00:00
# If true, a ServiceMonitor CRD is created for a prometheus operator
# https://github.com/coreos/prometheus-operator
#
enabled : true
2020-12-18 00:46:15 +00:00
# Path to use for scraping metrics. Might be different if server.root_url is set
# in grafana.ini
path : "/metrics"
2022-04-08 15:08:28 +00:00
# namespace: monitoring (defaults to use the namespace this chart is deployed to)
2021-12-09 18:03:55 +00:00
2022-04-08 15:08:28 +00:00
# labels for the ServiceMonitor
labels : {}
# Scrape interval. If not set, the Prometheus default scrape interval is used.
#
interval : ""
scheme : http
tlsConfig : {}
scrapeTimeout : 30s
2020-12-18 00:46:15 +00:00
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2023-05-13 08:38:33 +00:00
## Flag to disable all the kubernetes component scrapers
##
kubernetesServiceMonitors :
enabled : true
2020-12-18 00:46:15 +00:00
## Component scraping the kube api server
##
kubeApiServer :
enabled : true
tlsConfig :
serverName : kubernetes
insecureSkipVerify : false
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
jobLabel : component
selector :
matchLabels :
component : apiserver
provider : kubernetes
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
2022-08-24 15:13:39 +00:00
metricRelabelings :
# Drop excessively noisy apiserver buckets.
- action : drop
regex : apiserver_request_duration_seconds_bucket;(0.15|0.2|0.3|0.35|0.4|0.45|0.6|0.7|0.8|0.9|1.25|1.5|1.75|2|3|3.5|4|4.5|6|7|8|9|15|25|40|50)
sourceLabels :
- __name__
- le
2020-12-18 00:46:15 +00:00
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2021-12-09 18:03:55 +00:00
##
2021-06-30 16:26:06 +00:00
relabelings : [ ]
# - sourceLabels:
# - __meta_kubernetes_namespace
# - __meta_kubernetes_service_name
# - __meta_kubernetes_endpoint_port_name
# action: keep
# regex: default;kubernetes;https
# - targetLabel: __address__
# replacement: kubernetes.default.svc:443
2020-12-18 00:46:15 +00:00
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping the kubelet and kubelet-hosted cAdvisor
##
kubelet :
enabled : true
namespace : kube-system
serviceMonitor :
2023-11-27 12:45:06 +00:00
## Attach metadata to discovered targets. Requires Prometheus v2.45 for endpoints created by the operator.
##
attachMetadata :
node : false
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-11-27 12:45:06 +00:00
## If true, Prometheus use (respect) labels provided by exporter.
##
honorLabels : true
## If true, Prometheus ingests metrics with timestamp provided by exporter. If false, Prometheus ingests metrics with timestamp of scrape.
##
honorTimestamps : true
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
## Enable scraping the kubelet over https. For requirements to enable this see
## https://github.com/prometheus-operator/prometheus-operator/issues/926
##
https : true
## Enable scraping /metrics/cadvisor from kubelet's service
##
cAdvisor : true
## Enable scraping /metrics/probes from kubelet's service
##
probes : true
## Enable scraping /metrics/resource from kubelet's service
## This is disabled by default because container metrics are already exposed by cAdvisor
##
resource : false
# From kubernetes 1.18, /metrics/resource/v1alpha1 renamed to /metrics/resource
resourcePath : "/metrics/resource/v1alpha1"
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
2022-08-24 15:13:39 +00:00
cAdvisorMetricRelabelings :
# Drop less useful container CPU metrics.
- sourceLabels : [ __name__]
action : drop
regex : 'container_cpu_(cfs_throttled_seconds_total|load_average_10s|system_seconds_total|user_seconds_total)'
# Drop less useful container / always zero filesystem metrics.
- sourceLabels : [ __name__]
action : drop
regex : 'container_fs_(io_current|io_time_seconds_total|io_time_weighted_seconds_total|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total)'
# Drop less useful / always zero container memory metrics.
- sourceLabels : [ __name__]
action : drop
regex : 'container_memory_(mapped_file|swap)'
# Drop less useful container process metrics.
- sourceLabels : [ __name__]
action : drop
regex : 'container_(file_descriptors|tasks_state|threads_max)'
# Drop container spec metrics that overlap with kube-state-metrics.
- sourceLabels : [ __name__]
action : drop
regex : 'container_spec.*'
# Drop cgroup metrics with no pod.
- sourceLabels : [ id, pod]
action : drop
regex : '.+;'
2020-12-18 00:46:15 +00:00
# - sourceLabels: [__name__, image]
# separator: ;
# regex: container_([a-z_]+);
# replacement: $1
# action: drop
# - sourceLabels: [__name__]
# separator: ;
# regex: container_(network_tcp_usage_total|network_udp_usage_total|tasks_state|cpu_load_average_10s)
# replacement: $1
# action: drop
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
probesMetricRelabelings : [ ]
# - sourceLabels: [__name__, image]
# separator: ;
# regex: container_([a-z_]+);
# replacement: $1
# action: drop
# - sourceLabels: [__name__]
# separator: ;
# regex: container_(network_tcp_usage_total|network_udp_usage_total|tasks_state|cpu_load_average_10s)
# replacement: $1
# action: drop
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
2021-12-09 18:03:55 +00:00
## metrics_path is required to match upstream rules and charts
2020-12-18 00:46:15 +00:00
cAdvisorRelabelings :
2022-12-06 20:43:11 +00:00
- action : replace
sourceLabels : [ __metrics_path__]
2020-12-18 00:46:15 +00:00
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2021-12-09 18:03:55 +00:00
##
2020-12-18 00:46:15 +00:00
probesRelabelings :
2022-12-06 20:43:11 +00:00
- action : replace
sourceLabels : [ __metrics_path__]
2020-12-18 00:46:15 +00:00
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2021-12-09 18:03:55 +00:00
##
2020-12-18 00:46:15 +00:00
resourceRelabelings :
2022-12-06 20:43:11 +00:00
- action : replace
sourceLabels : [ __metrics_path__]
2020-12-18 00:46:15 +00:00
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2021-12-09 18:03:55 +00:00
##
2020-12-18 00:46:15 +00:00
metricRelabelings : [ ]
# - sourceLabels: [__name__, image]
# separator: ;
# regex: container_([a-z_]+);
# replacement: $1
# action: drop
# - sourceLabels: [__name__]
# separator: ;
# regex: container_(network_tcp_usage_total|network_udp_usage_total|tasks_state|cpu_load_average_10s)
# replacement: $1
# action: drop
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
2021-12-09 18:03:55 +00:00
## metrics_path is required to match upstream rules and charts
2020-12-18 00:46:15 +00:00
relabelings :
2022-12-06 20:43:11 +00:00
- action : replace
sourceLabels : [ __metrics_path__]
2020-12-18 00:46:15 +00:00
targetLabel : metrics_path
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping the kube controller manager
##
kubeControllerManager :
enabled : true
## If your kube controller manager is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## If using kubeControllerManager.endpoints only the port and targetPort are used
##
service :
2021-04-15 13:03:52 +00:00
enabled : true
2022-01-28 16:19:41 +00:00
## If null or unset, the value is determined dynamically based on target Kubernetes version due to change
## of default port in Kubernetes 1.22.
##
port : null
targetPort : null
2020-12-18 00:46:15 +00:00
# selector:
# component: kube-controller-manager
serviceMonitor :
2021-04-15 13:03:52 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2024-04-04 13:39:36 +00:00
## port: Name of the port the metrics will be scraped from
##
port : http-metrics
jobLabel : jobLabel
selector : {}
# matchLabels:
# component: kube-controller-manager
2020-12-18 00:46:15 +00:00
## Enable scraping kube-controller-manager over https.
2022-01-28 16:19:41 +00:00
## Requires proper certs (not self-signed) and delegated authentication/authorization checks.
## If null or unset, the value is determined dynamically based on target Kubernetes version.
2020-12-18 00:46:15 +00:00
##
2022-01-28 16:19:41 +00:00
https : null
2020-12-18 00:46:15 +00:00
# Skip TLS certificate validation when scraping
insecureSkipVerify : null
# Name of the server to use when validating TLS certificate
serverName : null
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping coreDns. Use either this or kubeDns
##
coreDns :
enabled : true
service :
2024-04-04 13:39:36 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
port : 9153
targetPort : 9153
# selector:
# k8s-app: kube-dns
serviceMonitor :
2024-04-04 13:39:36 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2024-04-04 13:39:36 +00:00
## port: Name of the port the metrics will be scraped from
##
port : http-metrics
jobLabel : jobLabel
selector : {}
# matchLabels:
# k8s-app: kube-dns
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping kubeDns. Use either this or coreDns
##
kubeDns :
enabled : false
service :
dnsmasq :
port : 10054
targetPort : 10054
skydns :
port : 10055
targetPort : 10055
# selector:
# k8s-app: kube-dns
serviceMonitor :
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2024-04-04 13:39:36 +00:00
jobLabel : jobLabel
selector : {}
# matchLabels:
# k8s-app: kube-dns
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2021-12-09 18:03:55 +00:00
##
2020-12-18 00:46:15 +00:00
dnsmasqMetricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
dnsmasqRelabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping etcd
##
kubeEtcd :
enabled : true
## If your etcd is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## Etcd service. If using kubeEtcd.endpoints only the port and targetPort are used
##
service :
2021-04-15 13:03:52 +00:00
enabled : true
2022-10-27 12:27:42 +00:00
port : 2381
targetPort : 2381
2020-12-18 00:46:15 +00:00
# selector:
# component: etcd
## Configure secure access to the etcd cluster by loading a secret into prometheus and
## specifying security configuration below. For example, with a secret named etcd-client-cert
##
## serviceMonitor:
## scheme: https
## insecureSkipVerify: false
## serverName: localhost
## caFile: /etc/prometheus/secrets/etcd-client-cert/etcd-ca
## certFile: /etc/prometheus/secrets/etcd-client-cert/etcd-client
## keyFile: /etc/prometheus/secrets/etcd-client-cert/etcd-client-key
##
serviceMonitor :
2021-04-15 13:03:52 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
scheme : http
insecureSkipVerify : false
serverName : ""
caFile : ""
certFile : ""
keyFile : ""
2024-04-04 13:39:36 +00:00
## port: Name of the port the metrics will be scraped from
##
port : http-metrics
jobLabel : jobLabel
selector : {}
# matchLabels:
# component: etcd
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping kube scheduler
##
kubeScheduler :
enabled : true
## If your kube scheduler is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
## If using kubeScheduler.endpoints only the port and targetPort are used
##
service :
2021-04-15 13:03:52 +00:00
enabled : true
2022-01-28 16:19:41 +00:00
## If null or unset, the value is determined dynamically based on target Kubernetes version due to change
## of default port in Kubernetes 1.23.
##
port : null
targetPort : null
2020-12-18 00:46:15 +00:00
# selector:
# component: kube-scheduler
serviceMonitor :
2021-04-15 13:03:52 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
## Enable scraping kube-scheduler over https.
2022-01-28 16:19:41 +00:00
## Requires proper certs (not self-signed) and delegated authentication/authorization checks.
## If null or unset, the value is determined dynamically based on target Kubernetes version.
2020-12-18 00:46:15 +00:00
##
2022-01-28 16:19:41 +00:00
https : null
2020-12-18 00:46:15 +00:00
2024-04-04 13:39:36 +00:00
## port: Name of the port the metrics will be scraped from
##
port : http-metrics
jobLabel : jobLabel
selector : {}
# matchLabels:
# component: kube-scheduler
2020-12-18 00:46:15 +00:00
## Skip TLS certificate validation when scraping
insecureSkipVerify : null
## Name of the server to use when validating TLS certificate
serverName : null
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping kube proxy
##
kubeProxy :
enabled : true
## If your kube proxy is not deployed as a pod, specify IPs it can be found on
##
endpoints : [ ]
# - 10.141.4.22
# - 10.141.4.23
# - 10.141.4.24
service :
2021-04-15 13:03:52 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
port : 10249
targetPort : 10249
# selector:
# k8s-app: kube-proxy
serviceMonitor :
2021-04-15 13:03:52 +00:00
enabled : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2021-04-15 13:03:52 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2024-04-04 13:39:36 +00:00
## port: Name of the port the metrics will be scraped from
##
port : http-metrics
jobLabel : jobLabel
selector : {}
# matchLabels:
# k8s-app: kube-proxy
2020-12-18 00:46:15 +00:00
## Enable scraping kube-proxy over https.
## Requires proper certs (not self-signed) and delegated authentication/authorization checks
##
https : false
2021-12-09 18:03:55 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-12-09 18:03:55 +00:00
## RelabelConfigs to apply to samples before scraping
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2022-08-24 15:13:39 +00:00
## Additional labels
##
additionalLabels : {}
# foo: bar
2020-12-18 00:46:15 +00:00
## Component scraping kube state metrics
##
kubeStateMetrics :
enabled : true
2021-06-30 16:26:06 +00:00
2020-12-18 00:46:15 +00:00
## Configuration for kube-state-metrics subchart
##
kube-state-metrics :
namespaceOverride : ""
rbac :
create : true
2022-01-28 16:19:41 +00:00
releaseLabel : true
prometheus :
monitor :
enabled : true
2020-12-18 00:46:15 +00:00
2022-01-28 16:19:41 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2020-12-18 00:46:15 +00:00
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2022-01-28 16:19:41 +00:00
## Scrape Timeout. If not set, the Prometheus default scrape timeout is used.
##
scrapeTimeout : ""
2020-12-18 00:46:15 +00:00
2022-01-28 16:19:41 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
2020-12-18 00:46:15 +00:00
2022-01-28 16:19:41 +00:00
# Keep labels from scraped data, overriding server-side labels
##
honorLabels : true
2021-04-15 13:03:52 +00:00
2022-01-28 16:19:41 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2020-12-18 00:46:15 +00:00
2022-01-28 16:19:41 +00:00
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
selfMonitor :
enabled : false
2020-12-18 00:46:15 +00:00
2022-01-28 16:19:41 +00:00
## Deploy node exporter as a daemonset to all nodes
##
nodeExporter :
enabled : true
2023-11-27 12:45:06 +00:00
operatingSystems :
linux :
enabled : true
darwin :
enabled : true
2020-12-18 00:46:15 +00:00
2024-04-04 13:39:36 +00:00
## ForceDeployDashboard Create dashboard configmap even if nodeExporter deployment has been disabled
##
forceDeployDashboards : false
2020-12-18 00:46:15 +00:00
## Configuration for prometheus-node-exporter subchart
##
prometheus-node-exporter :
namespaceOverride : ""
podLabels :
## Add the 'node-exporter' label to be used by serviceMonitor to match standard common usage in rules and grafana dashboards
##
jobLabel : node-exporter
2022-09-16 09:21:38 +00:00
releaseLabel : true
2020-12-18 00:46:15 +00:00
extraArgs :
2022-04-08 15:08:28 +00:00
- --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/)
- --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$
2021-12-09 18:03:55 +00:00
service :
portName : http-metrics
2022-01-28 16:19:41 +00:00
prometheus :
monitor :
enabled : true
jobLabel : jobLabel
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2022-01-28 16:19:41 +00:00
## How long until a scrape request times out. If not set, the Prometheus default scape timeout is used.
##
scrapeTimeout : ""
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - sourceLabels: [__name__]
# separator: ;
# regex: ^node_mountstats_nfs_(event|operations|transport)_.+
# replacement: $1
# action: drop
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
rbac :
## If true, create PSPs for node-exporter
##
pspEnabled : false
2020-12-18 00:46:15 +00:00
## Manages Prometheus and Alertmanager components
##
prometheusOperator :
enabled : true
2024-04-04 13:39:36 +00:00
## Use '{{ template "kube-prometheus-stack.fullname" . }}-operator' by default
fullnameOverride : ""
2023-08-22 13:42:24 +00:00
## Number of old replicasets to retain ##
## The default value is 10, 0 will garbage-collect old replicasets ##
revisionHistoryLimit : 10
2024-04-04 13:39:36 +00:00
## Strategy of the deployment
##
strategy : {}
2021-02-26 21:25:43 +00:00
## Prometheus-Operator v0.39.0 and later support TLS natively.
##
2020-12-18 00:46:15 +00:00
tls :
enabled : true
# Value must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants
tlsMinVersion : VersionTLS13
2021-02-26 21:25:43 +00:00
# The default webhook port is 10250 in order to work out-of-the-box in GKE private clusters and avoid adding firewall rules.
internalPort : 10250
2020-12-18 00:46:15 +00:00
## Admission webhook support for PrometheusRules resources added in Prometheus Operator 0.30 can be enabled to prevent incorrectly formatted
## rules from making their way into prometheus and potentially preventing the container from starting
admissionWebhooks :
2023-08-22 13:42:24 +00:00
## Valid values: Fail, Ignore, IgnoreOnInstallOnly
## IgnoreOnInstallOnly - If Release.IsInstall returns "true", set "Ignore" otherwise "Fail"
failurePolicy : ""
2022-08-24 15:13:39 +00:00
## The default timeoutSeconds is 10 and the maximum value is 30.
timeoutSeconds : 10
2020-12-18 00:46:15 +00:00
enabled : true
2021-02-26 21:25:43 +00:00
## A PEM encoded CA bundle which will be used to validate the webhook's server certificate.
## If unspecified, system trust roots on the apiserver are used.
caBundle : ""
2020-12-18 00:46:15 +00:00
## If enabled, generate a self-signed certificate, then patch the webhook configurations with the generated data.
## On chart upgrades (or if the secret exists) the cert will not be re-generated. You can use this to provide your own
## certs ahead of time if you wish.
##
2022-10-27 12:27:42 +00:00
annotations : {}
# argocd.argoproj.io/hook: PreSync
# argocd.argoproj.io/hook-delete-policy: HookSucceeded
2024-04-04 13:39:36 +00:00
namespaceSelector : {}
deployment :
enabled : false
## Number of replicas
##
replicas : 1
## Strategy of the deployment
##
strategy : {}
# Ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/
podDisruptionBudget : {}
# maxUnavailable: 1
# minAvailable: 1
## Number of old replicasets to retain ##
## The default value is 10, 0 will garbage-collect old replicasets ##
revisionHistoryLimit : 10
## Prometheus-Operator v0.39.0 and later support TLS natively.
##
tls :
enabled : true
# Value must match version names from https://golang.org/pkg/crypto/tls/#pkg-constants
tlsMinVersion : VersionTLS13
# The default webhook port is 10250 in order to work out-of-the-box in GKE private clusters and avoid adding firewall rules.
internalPort : 10250
## Service account for Prometheus Operator Webhook to use.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
automountServiceAccountToken : false
create : true
name : ""
## Configuration for Prometheus operator Webhook service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 31080
nodePortTls : 31443
## Additional ports to open for Prometheus operator Webhook service
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#multi-port-services
##
additionalPorts : [ ]
## Loadbalancer IP
## Only use if service.type is "LoadBalancer"
##
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
## NodePort, ClusterIP, LoadBalancer
##
type : ClusterIP
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
externalIPs : [ ]
# ## Labels to add to the operator webhook deployment
# ##
labels : {}
## Annotations to add to the operator webhook deployment
##
annotations : {}
## Labels to add to the operator webhook pod
##
podLabels : {}
## Annotations to add to the operator webhook pod
##
podAnnotations : {}
## Assign a PriorityClassName to pods if set
# priorityClassName: ""
## Define Log Format
# Use logfmt (default) or json logging
# logFormat: logfmt
## Decrease log verbosity to errors only
# logLevel: error
## Prometheus-operator webhook image
##
image :
registry : quay.io
repository : prometheus-operator/admission-webhook
# if not set appVersion field from Chart.yaml is used
tag : ""
sha : ""
pullPolicy : IfNotPresent
## Define Log Format
# Use logfmt (default) or json logging
# logFormat: logfmt
## Decrease log verbosity to errors only
# logLevel: error
## Liveness probe
##
livenessProbe :
enabled : true
failureThreshold : 3
initialDelaySeconds : 30
periodSeconds : 10
successThreshold : 1
timeoutSeconds : 1
## Readiness probe
##
readinessProbe :
enabled : true
failureThreshold : 3
initialDelaySeconds : 5
periodSeconds : 10
successThreshold : 1
timeoutSeconds : 1
## Resource limits & requests
##
resources : {}
# limits:
# cpu: 200m
# memory: 200Mi
# requests:
# cpu: 100m
# memory: 100Mi
# Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),
# because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working
##
hostNetwork : false
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Tolerations for use with node taints
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
## Assign custom affinity rules to the prometheus operator
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
dnsConfig : {}
# nameservers:
# - 1.2.3.4
# searches:
# - ns1.svc.cluster-domain.example
# - my.dns.search.suffix
# options:
# - name: ndots
# value: "2"
# - name: edns0
securityContext :
fsGroup : 65534
runAsGroup : 65534
runAsNonRoot : true
runAsUser : 65534
seccompProfile :
type : RuntimeDefault
## Container-specific security context configuration
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
containerSecurityContext :
allowPrivilegeEscalation : false
readOnlyRootFilesystem : true
capabilities :
drop :
- ALL
## If false then the user will opt out of automounting API credentials.
##
automountServiceAccountToken : true
2020-12-18 00:46:15 +00:00
patch :
enabled : true
image :
2023-04-14 10:44:57 +00:00
registry : registry.k8s.io
2022-12-06 20:43:11 +00:00
repository : ingress-nginx/kube-webhook-certgen
2023-04-14 10:44:57 +00:00
tag : v20221220-controller-v1.5.1-58-g787ea74b6
2022-04-08 15:08:28 +00:00
sha : ""
2020-12-18 00:46:15 +00:00
pullPolicy : IfNotPresent
resources : {}
## Provide a priority class name to the webhook patching job
##
priorityClassName : ""
2022-10-27 12:27:42 +00:00
annotations : {}
# argocd.argoproj.io/hook: PreSync
# argocd.argoproj.io/hook-delete-policy: HookSucceeded
2020-12-18 00:46:15 +00:00
podAnnotations : {}
nodeSelector : {}
affinity : {}
tolerations : [ ]
2021-06-30 16:26:06 +00:00
## SecurityContext holds pod-level security attributes and common container settings.
2021-08-25 13:59:17 +00:00
## This defaults to non root user with uid 2000 and gid 2000. *v1.PodSecurityContext false
2021-06-30 16:26:06 +00:00
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 2000
2023-08-22 13:42:24 +00:00
seccompProfile :
type : RuntimeDefault
2021-06-30 16:26:06 +00:00
2022-09-16 09:21:38 +00:00
# Security context for create job container
createSecretJob :
2023-08-22 13:42:24 +00:00
securityContext :
allowPrivilegeEscalation : false
readOnlyRootFilesystem : true
capabilities :
drop :
- ALL
2022-09-16 09:21:38 +00:00
# Security context for patch job container
patchWebhookJob :
2023-08-22 13:42:24 +00:00
securityContext :
allowPrivilegeEscalation : false
readOnlyRootFilesystem : true
capabilities :
drop :
- ALL
2022-09-16 09:21:38 +00:00
2021-02-26 21:25:43 +00:00
# Use certmanager to generate webhook certs
certManager :
enabled : false
2022-01-28 16:19:41 +00:00
# self-signed root certificate
rootCert :
duration : "" # default to be 5y
admissionCert :
duration : "" # default to be 1y
2021-02-26 21:25:43 +00:00
# issuerRef:
# name: "issuer"
# kind: "ClusterIssuer"
2020-12-18 00:46:15 +00:00
## Namespaces to scope the interaction of the Prometheus Operator and the apiserver (allow list).
## This is mutually exclusive with denyNamespaces. Setting this to an empty object will disable the configuration
##
namespaces : {}
# releaseNamespace: true
# additional:
# - kube-system
## Namespaces not to scope the interaction of the Prometheus Operator (deny list).
##
denyNamespaces : [ ]
## Filter namespaces to look for prometheus-operator custom resources
##
alertmanagerInstanceNamespaces : [ ]
2022-08-24 15:13:39 +00:00
alertmanagerConfigNamespaces : [ ]
2020-12-18 00:46:15 +00:00
prometheusInstanceNamespaces : [ ]
thanosRulerInstanceNamespaces : [ ]
2021-02-26 21:25:43 +00:00
## The clusterDomain value will be added to the cluster.peer option of the alertmanager.
## Without this specified option cluster.peer will have value alertmanager-monitoring-alertmanager-0.alertmanager-operated:9094 (default value)
## With this specified option cluster.peer will have value alertmanager-monitoring-alertmanager-0.alertmanager-operated.namespace.svc.cluster-domain:9094
##
# clusterDomain: "cluster.local"
2022-12-06 20:43:11 +00:00
networkPolicy :
## Enable creation of NetworkPolicy resources.
##
enabled : false
2023-05-13 08:38:33 +00:00
## Flavor of the network policy to use.
# Can be:
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
# * cilium for cilium.io/v2/CiliumNetworkPolicy
flavor : kubernetes
# cilium:
# egress:
2023-08-22 13:42:24 +00:00
## match labels used in selector
# matchLabels: {}
2023-11-27 12:45:06 +00:00
## Service account for Prometheus Operator to use.
2020-12-18 00:46:15 +00:00
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
create : true
name : ""
2024-04-04 13:39:36 +00:00
automountServiceAccountToken : true
2020-12-18 00:46:15 +00:00
## Configuration for Prometheus operator service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30080
nodePortTls : 30443
2023-11-27 12:45:06 +00:00
## Additional ports to open for Prometheus operator service
2020-12-18 00:46:15 +00:00
## ref: https://kubernetes.io/docs/concepts/services-networking/service/#multi-port-services
##
additionalPorts : [ ]
## Loadbalancer IP
2021-03-22 09:23:27 +00:00
## Only use if service.type is "LoadBalancer"
2020-12-18 00:46:15 +00:00
##
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2020-12-18 00:46:15 +00:00
## Service type
2021-03-22 09:23:27 +00:00
## NodePort, ClusterIP, LoadBalancer
2020-12-18 00:46:15 +00:00
##
type : ClusterIP
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
externalIPs : [ ]
2022-10-27 12:27:42 +00:00
# ## Labels to add to the operator deployment
# ##
labels : {}
2022-08-24 15:13:39 +00:00
## Annotations to add to the operator deployment
##
annotations : {}
2020-12-18 00:46:15 +00:00
## Labels to add to the operator pod
##
podLabels : {}
## Annotations to add to the operator pod
##
podAnnotations : {}
## Assign a PriorityClassName to pods if set
# priorityClassName: ""
## Define Log Format
# Use logfmt (default) or json logging
# logFormat: logfmt
## Decrease log verbosity to errors only
# logLevel: error
kubeletService :
2024-04-04 13:39:36 +00:00
## If true, the operator will create and maintain a service for scraping kubelets
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/helm/prometheus-operator/README.md
##
2020-12-18 00:46:15 +00:00
enabled : true
namespace : kube-system
2021-12-09 18:03:55 +00:00
## Use '{{ template "kube-prometheus-stack.fullname" . }}-kubelet' by default
name : ""
2020-12-18 00:46:15 +00:00
## Create a servicemonitor for the operator
##
serviceMonitor :
2024-04-04 13:39:36 +00:00
## If true, create a serviceMonitor for prometheus operator
##
selfMonitor : true
2022-12-06 20:43:11 +00:00
## Labels for ServiceMonitor
additionalLabels : {}
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2020-12-18 00:46:15 +00:00
## Scrape timeout. If not set, the Prometheus default scrape timeout is used.
scrapeTimeout : ""
2021-08-25 13:59:17 +00:00
## Metric relabel configs to apply to samples before ingestion.
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-08-25 13:59:17 +00:00
# relabel configs to apply to samples before ingestion.
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
## Resource limits & requests
##
resources : {}
# limits:
# cpu: 200m
# memory: 200Mi
# requests:
# cpu: 100m
# memory: 100Mi
2024-04-04 13:39:36 +00:00
## Operator Environment
## env:
## VARIABLE: value
env :
GOGC : "30"
2020-12-18 00:46:15 +00:00
# Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),
# because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working
##
hostNetwork : false
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Tolerations for use with node taints
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
## Assign custom affinity rules to the prometheus operator
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
2021-02-26 21:25:43 +00:00
dnsConfig : {}
# nameservers:
# - 1.2.3.4
# searches:
# - ns1.svc.cluster-domain.example
# - my.dns.search.suffix
# options:
# - name: ndots
# value: "2"
# - name: edns0
2020-12-18 00:46:15 +00:00
securityContext :
fsGroup : 65534
runAsGroup : 65534
runAsNonRoot : true
runAsUser : 65534
2023-08-22 13:42:24 +00:00
seccompProfile :
type : RuntimeDefault
2020-12-18 00:46:15 +00:00
2022-04-08 15:08:28 +00:00
## Container-specific security context configuration
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
containerSecurityContext :
allowPrivilegeEscalation : false
readOnlyRootFilesystem : true
2023-08-22 13:42:24 +00:00
capabilities :
drop :
- ALL
2022-04-08 15:08:28 +00:00
2022-10-27 12:27:42 +00:00
# Enable vertical pod autoscaler support for prometheus-operator
verticalPodAutoscaler :
enabled : false
2023-08-22 13:42:24 +00:00
# Recommender responsible for generating recommendation for the object.
# List should be empty (then the default recommender will generate the recommendation)
# or contain exactly one recommender.
# recommenders:
# - name: custom-recommender-performance
2022-10-27 12:27:42 +00:00
# List of resources that the vertical pod autoscaler can control. Defaults to cpu and memory
controlledResources : [ ]
2023-08-22 13:42:24 +00:00
# Specifies which resource values should be controlled: RequestsOnly or RequestsAndLimits.
# controlledValues: RequestsAndLimits
2022-10-27 12:27:42 +00:00
# Define the max allowed resources for the pod
maxAllowed : {}
# cpu: 200m
# memory: 100Mi
# Define the min allowed resources for the pod
minAllowed : {}
# cpu: 200m
# memory: 100Mi
updatePolicy :
2023-08-22 13:42:24 +00:00
# Specifies minimal number of replicas which need to be alive for VPA Updater to attempt pod eviction
# minReplicas: 1
2022-10-27 12:27:42 +00:00
# Specifies whether recommended updates are applied when a Pod is started and whether recommended updates
# are applied during the life of a Pod. Possible values are "Off", "Initial", "Recreate", and "Auto".
updateMode : Auto
2020-12-18 00:46:15 +00:00
## Prometheus-operator image
##
image :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : prometheus-operator/prometheus-operator
2023-04-14 10:44:57 +00:00
# if not set appVersion field from Chart.yaml is used
tag : ""
2020-12-18 00:46:15 +00:00
sha : ""
pullPolicy : IfNotPresent
2021-02-26 21:25:43 +00:00
## Prometheus image to use for prometheuses managed by the operator
2020-12-18 00:46:15 +00:00
##
2022-12-06 20:43:11 +00:00
# prometheusDefaultBaseImage: prometheus/prometheus
## Prometheus image registry to use for prometheuses managed by the operator
##
# prometheusDefaultBaseImageRegistry: quay.io
2021-02-26 21:25:43 +00:00
## Alertmanager image to use for alertmanagers managed by the operator
##
2022-12-06 20:43:11 +00:00
# alertmanagerDefaultBaseImage: prometheus/alertmanager
## Alertmanager image registry to use for alertmanagers managed by the operator
##
# alertmanagerDefaultBaseImageRegistry: quay.io
2020-12-18 00:46:15 +00:00
2021-12-09 18:03:55 +00:00
## Prometheus-config-reloader
2020-12-18 00:46:15 +00:00
##
2021-12-09 18:03:55 +00:00
prometheusConfigReloader :
image :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : prometheus-operator/prometheus-config-reloader
2023-04-14 10:44:57 +00:00
# if not set appVersion field from Chart.yaml is used
tag : ""
2021-12-09 18:03:55 +00:00
sha : ""
2020-12-18 00:46:15 +00:00
2023-05-13 08:38:33 +00:00
# add prometheus config reloader liveness and readiness probe. Default: false
enableProbe : false
2021-12-09 18:03:55 +00:00
# resource config for prometheusConfigReloader
2023-11-27 12:45:06 +00:00
resources : {}
# requests:
# cpu: 200m
# memory: 50Mi
# limits:
# cpu: 200m
# memory: 50Mi
2020-12-18 00:46:15 +00:00
2021-06-30 16:26:06 +00:00
## Thanos side-car image when configured
##
thanosImage :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : thanos/thanos
2024-04-04 13:39:36 +00:00
tag : v0.34.1
2021-06-30 16:26:06 +00:00
sha : ""
2023-05-13 08:38:33 +00:00
## Set a Label Selector to filter watched prometheus and prometheusAgent
##
prometheusInstanceSelector : ""
## Set a Label Selector to filter watched alertmanager
##
alertmanagerInstanceSelector : ""
## Set a Label Selector to filter watched thanosRuler
thanosRulerInstanceSelector : ""
2020-12-18 00:46:15 +00:00
## Set a Field Selector to filter watched secrets
##
2023-08-22 13:42:24 +00:00
secretFieldSelector : "type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1"
2020-12-18 00:46:15 +00:00
2024-04-04 13:39:36 +00:00
## If false then the user will opt out of automounting API credentials.
##
automountServiceAccountToken : true
## Additional volumes
##
extraVolumes : [ ]
## Additional volume mounts
##
extraVolumeMounts : [ ]
2020-12-18 00:46:15 +00:00
## Deploy a Prometheus instance
##
prometheus :
enabled : true
2023-08-22 13:42:24 +00:00
## Toggle prometheus into agent mode
## Note many of features described below (e.g. rules, query, alerting, remote read, thanos) will not work in agent mode.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/designs/prometheus-agent.md
##
agentMode : false
2020-12-18 00:46:15 +00:00
## Annotations for Prometheus
##
annotations : {}
2023-04-14 10:44:57 +00:00
## Configure network policy for the prometheus
networkPolicy :
enabled : false
2023-05-13 08:38:33 +00:00
## Flavor of the network policy to use.
# Can be:
# * kubernetes for networking.k8s.io/v1/NetworkPolicy
# * cilium for cilium.io/v2/CiliumNetworkPolicy
flavor : kubernetes
# cilium:
# endpointSelector:
# egress:
# ingress:
2023-04-14 10:44:57 +00:00
# egress:
# - {}
# ingress:
# - {}
# podSelector:
# matchLabels:
# app: prometheus
2020-12-18 00:46:15 +00:00
## Service account for Prometheuses to use.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
create : true
name : ""
2021-04-15 13:03:52 +00:00
annotations : {}
2024-04-04 13:39:36 +00:00
automountServiceAccountToken : true
2020-12-18 00:46:15 +00:00
2021-02-26 21:25:43 +00:00
# Service for thanos service discovery on sidecar
# Enable this can make Thanos Query can use
# `--store=dnssrv+_grpc._tcp.${kube-prometheus-stack.fullname}-thanos-discovery.${namespace}.svc.cluster.local` to discovery
# Thanos sidecar on prometheus nodes
# (Please remember to change ${kube-prometheus-stack.fullname} and ${namespace}. Not just copy and paste!)
thanosService :
enabled : false
annotations : {}
labels : {}
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2021-03-22 09:23:27 +00:00
## Service type
##
type : ClusterIP
2021-09-27 15:34:47 +00:00
## gRPC port config
portName : grpc
port : 10901
targetPort : "grpc"
## HTTP port config (for metrics)
httpPortName : http
httpPort : 10902
targetHttpPort : "http"
## ClusterIP to assign
# Default is to make this a headless service ("None")
clusterIP : "None"
## Port to expose on each node, if service type is NodePort
2021-03-22 09:23:27 +00:00
##
nodePort : 30901
2021-09-27 15:34:47 +00:00
httpNodePort : 30902
# ServiceMonitor to scrape Sidecar metrics
# Needs thanosService to be enabled as well
thanosServiceMonitor :
enabled : false
interval : ""
2023-04-14 10:44:57 +00:00
## Additional labels
##
additionalLabels : {}
2021-09-27 15:34:47 +00:00
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
2022-01-28 16:19:41 +00:00
## Of type: https://github.com/coreos/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
2021-09-27 15:34:47 +00:00
tlsConfig : {}
bearerTokenFile :
## Metric relabel configs to apply to samples before ingestion.
metricRelabelings : [ ]
## relabel configs to apply to samples before ingestion.
relabelings : [ ]
2021-03-22 09:23:27 +00:00
2021-05-11 08:07:38 +00:00
# Service for external access to sidecar
# Enabling this creates a service to expose thanos-sidecar outside the cluster.
thanosServiceExternal :
enabled : false
annotations : {}
labels : {}
2021-09-27 15:34:47 +00:00
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
## gRPC port config
2021-05-11 08:07:38 +00:00
portName : grpc
port : 10901
targetPort : "grpc"
2021-09-27 15:34:47 +00:00
## HTTP port config (for metrics)
httpPortName : http
httpPort : 10902
targetHttpPort : "http"
2021-05-11 08:07:38 +00:00
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2021-05-11 08:07:38 +00:00
## Service type
##
type : LoadBalancer
## Port to expose on each node
##
nodePort : 30901
2021-09-27 15:34:47 +00:00
httpNodePort : 30902
2021-05-11 08:07:38 +00:00
2020-12-18 00:46:15 +00:00
## Configuration for Prometheus service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port for Prometheus Service to listen on
##
port : 9090
## To be used with a proxy extraContainer port
targetPort : 9090
2024-04-04 13:39:36 +00:00
## Port for Prometheus Reloader to listen on
##
reloaderWebPort : 8080
2020-12-18 00:46:15 +00:00
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
externalIPs : [ ]
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30090
## Loadbalancer IP
2021-03-22 09:23:27 +00:00
## Only use if service.type is "LoadBalancer"
2020-12-18 00:46:15 +00:00
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2020-12-18 00:46:15 +00:00
## Service type
##
type : ClusterIP
2023-11-27 12:45:06 +00:00
## Additional ports to open for Prometheus service
##
2022-01-28 16:19:41 +00:00
additionalPorts : [ ]
2022-08-24 15:13:39 +00:00
# additionalPorts:
2023-11-27 12:45:06 +00:00
# - name: oauth-proxy
2022-08-24 15:13:39 +00:00
# port: 8081
# targetPort: 8081
2023-11-27 12:45:06 +00:00
# - name: oauth-metrics
# port: 8082
# targetPort: 8082
2022-01-28 16:19:41 +00:00
## Consider that all endpoints are considered "ready" even if the Pods themselves are not
## Ref: https://kubernetes.io/docs/reference/kubernetes-api/service-resources/service-v1/#ServiceSpec
publishNotReadyAddresses : false
2024-04-04 13:39:36 +00:00
## If you want to make sure that connections from a particular client are passed to the same Pod each time
## Accepts 'ClientIP' or 'None'
##
sessionAffinity : None
## If you want to modify the ClientIP sessionAffinity timeout
## The value must be >0 && <=86400(for 1 day) if ServiceAffinity == "ClientIP"
##
sessionAffinityConfig :
clientIP :
timeoutSeconds : 10800
2020-12-18 00:46:15 +00:00
## Configuration for creating a separate Service for each statefulset Prometheus replica
##
servicePerReplica :
enabled : false
annotations : {}
## Port for Prometheus Service per replica to listen on
##
port : 9090
## To be used with a proxy extraContainer port
targetPort : 9090
## Port to expose on each node
## Only used if servicePerReplica.type is 'NodePort'
##
nodePort : 30091
## Loadbalancer source IP ranges
2021-03-22 09:23:27 +00:00
## Only used if servicePerReplica.type is "LoadBalancer"
2020-12-18 00:46:15 +00:00
loadBalancerSourceRanges : [ ]
2022-04-08 15:08:28 +00:00
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
2020-12-18 00:46:15 +00:00
## Service type
##
type : ClusterIP
## Configure pod disruption budgets for Prometheus
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/#specifying-a-poddisruptionbudget
##
podDisruptionBudget :
enabled : false
minAvailable : 1
maxUnavailable : ""
2021-02-26 21:25:43 +00:00
# Ingress exposes thanos sidecar outside the cluster
2020-12-18 00:46:15 +00:00
thanosIngress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
servicePort : 10901
2021-02-26 21:25:43 +00:00
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30901
2020-12-18 00:46:15 +00:00
## Hosts must be provided if Ingress is enabled.
##
hosts : [ ]
# - thanos-gateway.domain.com
## Paths to use for ingress rules
##
paths : [ ]
# - /
2021-02-26 21:25:43 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
## TLS configuration for Thanos Ingress
2020-12-18 00:46:15 +00:00
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: thanos-gateway-tls
# hosts:
# - thanos-gateway.domain.com
2021-08-25 13:59:17 +00:00
#
## ExtraSecret can be used to store various data in an extra secret
## (use it for example to store hashed basic auth credentials)
extraSecret :
## if not set, name will be auto generated
# name: ""
annotations : {}
data : {}
# auth: |
# foo:$apr1$OFG3Xybp$ckL0FHDAkoXYIlH9.cysT0
# someoneelse:$apr1$DMZX2Z4q$6SbQIfyuLQd.xmo/P0m2c.
2020-12-18 00:46:15 +00:00
ingress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
2022-08-24 15:13:39 +00:00
## Redirect ingress to an additional defined port on the service
# servicePort: 8081
2020-12-18 00:46:15 +00:00
## Hostnames.
## Must be provided if Ingress is enabled.
##
# hosts:
# - prometheus.domain.com
hosts : [ ]
## Paths to use for ingress rules - one path should match the prometheusSpec.routePrefix
##
paths : [ ]
# - /
2021-02-26 21:25:43 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
2020-12-18 00:46:15 +00:00
## TLS configuration for Prometheus Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: prometheus-general-tls
# hosts:
# - prometheus.example.com
## Configuration for creating an Ingress that will map to each Prometheus replica service
## prometheus.servicePerReplica must be enabled
##
ingressPerReplica :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
## Final form of the hostname for each per replica ingress is
## {{ ingressPerReplica.hostPrefix }}-{{ $replicaNumber }}.{{ ingressPerReplica.hostDomain }}
##
## Prefix for the per replica ingress that will have `-$replicaNumber`
## appended to the end
hostPrefix : ""
## Domain that will be used for the per replica ingress
hostDomain : ""
## Paths to use for ingress rules
##
paths : [ ]
# - /
2021-02-26 21:25:43 +00:00
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
2020-12-18 00:46:15 +00:00
## Secret name containing the TLS certificate for Prometheus per replica ingress
## Secret must be manually created in the namespace
tlsSecretName : ""
## Separated secret for each per replica Ingress. Can be used together with cert-manager
##
tlsSecretPerReplica :
enabled : false
## Final form of the secret for each per replica ingress is
## {{ tlsSecretPerReplica.prefix }}-{{ $replicaNumber }}
##
prefix : "prometheus"
## Configure additional options for default pod security policy for Prometheus
## ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
podSecurityPolicy :
allowedCapabilities : [ ]
2021-02-26 21:25:43 +00:00
allowedHostPaths : [ ]
volumes : [ ]
2020-12-18 00:46:15 +00:00
serviceMonitor :
2024-04-04 13:39:36 +00:00
## If true, create a serviceMonitor for prometheus
##
selfMonitor : true
2020-12-18 00:46:15 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## Additional labels
##
additionalLabels : {}
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2020-12-18 00:46:15 +00:00
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
2022-01-28 16:19:41 +00:00
## Of type: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
2020-12-18 00:46:15 +00:00
tlsConfig : {}
bearerTokenFile :
2021-08-25 13:59:17 +00:00
## Metric relabel configs to apply to samples before ingestion.
2020-12-18 00:46:15 +00:00
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
2021-08-25 13:59:17 +00:00
# relabel configs to apply to samples before ingestion.
2020-12-18 00:46:15 +00:00
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2023-11-27 12:45:06 +00:00
## Additional Endpoints
##
additionalEndpoints : [ ]
# - port: oauth-metrics
# path: /metrics
2020-12-18 00:46:15 +00:00
## Settings affecting prometheusSpec
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#prometheusspec
2020-12-18 00:46:15 +00:00
##
prometheusSpec :
## If true, pass --storage.tsdb.max-block-duration=2h to prometheus. This is already done if using Thanos
##
disableCompaction : false
## APIServerConfig
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#apiserverconfig
2020-12-18 00:46:15 +00:00
##
apiserverConfig : {}
2022-10-27 12:27:42 +00:00
## Allows setting additional arguments for the Prometheus container
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#monitoring.coreos.com/v1.Prometheus
additionalArgs : [ ]
2020-12-18 00:46:15 +00:00
## Interval between consecutive scrapes.
## Defaults to 30s.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/release-0.44/pkg/prometheus/promcfg.go#L180-L183
##
scrapeInterval : ""
## Number of seconds to wait for target to respond before erroring
##
scrapeTimeout : ""
## Interval between consecutive evaluations.
##
evaluationInterval : ""
## ListenLocal makes the Prometheus server listen on loopback, so that it does not bind against the Pod IP.
##
listenLocal : false
## EnableAdminAPI enables Prometheus the administrative HTTP API which includes functionality such as deleting time series.
## This is disabled by default.
## ref: https://prometheus.io/docs/prometheus/latest/querying/api/#tsdb-admin-apis
##
enableAdminAPI : false
2023-05-13 08:38:33 +00:00
## Sets version of Prometheus overriding the Prometheus version as derived
## from the image tag. Useful in cases where the tag does not follow semver v2.
version : ""
2021-08-25 13:59:17 +00:00
## WebTLSConfig defines the TLS parameters for HTTPS
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#webtlsconfig
2021-08-25 13:59:17 +00:00
web : {}
2022-08-24 15:13:39 +00:00
## Exemplars related settings that are runtime reloadable.
## It requires to enable the exemplar storage feature to be effective.
exemplars : ""
## Maximum number of exemplars stored in memory for all series.
## If not set, Prometheus uses its default value.
## A value of zero or less than zero disables the storage.
# maxSize: 100000
2021-04-25 09:59:54 +00:00
# EnableFeatures API enables access to Prometheus disabled features.
# ref: https://prometheus.io/docs/prometheus/latest/disabled_features/
enableFeatures : [ ]
# - exemplar-storage
2020-12-18 00:46:15 +00:00
## Image of Prometheus.
##
image :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : prometheus/prometheus
2024-04-09 14:45:51 +00:00
tag : v2.51.1
2020-12-18 00:46:15 +00:00
sha : ""
## Tolerations for use with node taints
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
2021-02-26 21:25:43 +00:00
## If specified, the pod's topology spread constraints.
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
##
topologySpreadConstraints : [ ]
# - maxSkew: 1
# topologyKey: topology.kubernetes.io/zone
# whenUnsatisfiable: DoNotSchedule
# labelSelector:
# matchLabels:
# app: prometheus
2020-12-18 00:46:15 +00:00
## Alertmanagers to which alerts will be sent
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#alertmanagerendpoints
2020-12-18 00:46:15 +00:00
##
## Default configuration will connect to the alertmanager deployed as part of this release
##
alertingEndpoints : [ ]
# - name: ""
# namespace: ""
# port: http
# scheme: http
# pathPrefix: ""
# tlsConfig: {}
# bearerTokenFile: ""
# apiVersion: v2
## External labels to add to any time series or alerts when communicating with external systems
##
externalLabels : {}
2022-08-24 15:13:39 +00:00
## enable --web.enable-remote-write-receiver flag on prometheus-server
##
enableRemoteWriteReceiver : false
2020-12-18 00:46:15 +00:00
## Name of the external label used to denote replica name
##
replicaExternalLabelName : ""
## If true, the Operator won't add the external label used to denote replica name
##
replicaExternalLabelNameClear : false
## Name of the external label used to denote Prometheus instance name
##
prometheusExternalLabelName : ""
## If true, the Operator won't add the external label used to denote Prometheus instance name
##
prometheusExternalLabelNameClear : false
## External URL at which Prometheus will be reachable.
##
externalUrl : ""
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Secrets is a list of Secrets in the same namespace as the Prometheus object, which shall be mounted into the Prometheus Pods.
## The Secrets are mounted into /etc/prometheus/secrets/. Secrets changes after initial creation of a Prometheus object are not
## reflected in the running Pods. To change the secrets mounted into the Prometheus Pods, the object must be deleted and recreated
## with the new list of secrets.
##
secrets : [ ]
## ConfigMaps is a list of ConfigMaps in the same namespace as the Prometheus object, which shall be mounted into the Prometheus Pods.
## The ConfigMaps are mounted into /etc/prometheus/configmaps/.
##
configMaps : [ ]
## QuerySpec defines the query command line flags when starting Prometheus.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#queryspec
2020-12-18 00:46:15 +00:00
##
query : {}
2023-05-13 08:38:33 +00:00
## If nil, select own namespace. Namespaces to be selected for PrometheusRules discovery.
2020-12-18 00:46:15 +00:00
ruleNamespaceSelector : {}
2023-05-13 08:38:33 +00:00
## Example which selects PrometheusRules in namespaces with label "prometheus" set to "somelabel"
# ruleNamespaceSelector:
# matchLabels:
# prometheus: somelabel
2020-12-18 00:46:15 +00:00
## If true, a nil or {} value for prometheus.prometheusSpec.ruleSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the PrometheusRule resources created
##
ruleSelectorNilUsesHelmValues : true
## PrometheusRules to be selected for target discovery.
2021-03-22 09:23:27 +00:00
## If {}, select all PrometheusRules
2020-12-18 00:46:15 +00:00
##
ruleSelector : {}
2021-03-22 09:23:27 +00:00
## Example which select all PrometheusRules resources
2020-12-18 00:46:15 +00:00
## with label "prometheus" with values any of "example-rules" or "example-rules-2"
# ruleSelector:
# matchExpressions:
# - key: prometheus
# operator: In
# values:
# - example-rules
# - example-rules-2
#
2021-03-22 09:23:27 +00:00
## Example which select all PrometheusRules resources with label "role" set to "example-rules"
2020-12-18 00:46:15 +00:00
# ruleSelector:
# matchLabels:
# role: example-rules
## If true, a nil or {} value for prometheus.prometheusSpec.serviceMonitorSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the servicemonitors created
##
serviceMonitorSelectorNilUsesHelmValues : true
## ServiceMonitors to be selected for target discovery.
## If {}, select all ServiceMonitors
##
serviceMonitorSelector : {}
## Example which selects ServiceMonitors with label "prometheus" set to "somelabel"
# serviceMonitorSelector:
# matchLabels:
# prometheus: somelabel
## Namespaces to be selected for ServiceMonitor discovery.
##
serviceMonitorNamespaceSelector : {}
2021-02-26 21:25:43 +00:00
## Example which selects ServiceMonitors in namespaces with label "prometheus" set to "somelabel"
# serviceMonitorNamespaceSelector:
# matchLabels:
# prometheus: somelabel
2020-12-18 00:46:15 +00:00
## If true, a nil or {} value for prometheus.prometheusSpec.podMonitorSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the podmonitors created
##
podMonitorSelectorNilUsesHelmValues : true
## PodMonitors to be selected for target discovery.
## If {}, select all PodMonitors
##
podMonitorSelector : {}
## Example which selects PodMonitors with label "prometheus" set to "somelabel"
# podMonitorSelector:
# matchLabels:
# prometheus: somelabel
2023-05-13 08:38:33 +00:00
## If nil, select own namespace. Namespaces to be selected for PodMonitor discovery.
2020-12-18 00:46:15 +00:00
podMonitorNamespaceSelector : {}
2023-05-13 08:38:33 +00:00
## Example which selects PodMonitor in namespaces with label "prometheus" set to "somelabel"
# podMonitorNamespaceSelector:
# matchLabels:
# prometheus: somelabel
2020-12-18 00:46:15 +00:00
## If true, a nil or {} value for prometheus.prometheusSpec.probeSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the probes created
##
probeSelectorNilUsesHelmValues : true
## Probes to be selected for target discovery.
## If {}, select all Probes
##
probeSelector : {}
## Example which selects Probes with label "prometheus" set to "somelabel"
# probeSelector:
# matchLabels:
# prometheus: somelabel
2023-05-13 08:38:33 +00:00
## If nil, select own namespace. Namespaces to be selected for Probe discovery.
2020-12-18 00:46:15 +00:00
probeNamespaceSelector : {}
2023-05-13 08:38:33 +00:00
## Example which selects Probe in namespaces with label "prometheus" set to "somelabel"
# probeNamespaceSelector:
# matchLabels:
# prometheus: somelabel
2020-12-18 00:46:15 +00:00
2023-08-22 13:42:24 +00:00
## If true, a nil or {} value for prometheus.prometheusSpec.scrapeConfigSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the scrapeConfigs created
##
scrapeConfigSelectorNilUsesHelmValues : true
## scrapeConfigs to be selected for target discovery.
## If {}, select all scrapeConfigs
##
scrapeConfigSelector : {}
## Example which selects scrapeConfigs with label "prometheus" set to "somelabel"
2024-04-04 13:39:36 +00:00
# scrapeConfigSelector:
2023-08-22 13:42:24 +00:00
# matchLabels:
# prometheus: somelabel
## If nil, select own namespace. Namespaces to be selected for scrapeConfig discovery.
scrapeConfigNamespaceSelector : {}
## Example which selects scrapeConfig in namespaces with label "prometheus" set to "somelabel"
# scrapeConfigNamespaceSelector:
# matchLabels:
# prometheus: somelabel
2020-12-18 00:46:15 +00:00
## How long to retain metrics
##
retention : 10d
## Maximum size of metrics
##
retentionSize : ""
2023-04-14 10:44:57 +00:00
## Allow out-of-order/out-of-bounds samples ingested into Prometheus for a specified duration
## See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tsdb
tsdb :
outOfOrderTimeWindow : 0s
2020-12-18 00:46:15 +00:00
## Enable compression of the write-ahead log using Snappy.
##
2022-09-16 09:21:38 +00:00
walCompression : true
2020-12-18 00:46:15 +00:00
## If true, the Operator won't process any Prometheus configuration changes
##
paused : false
2021-02-26 21:25:43 +00:00
## Number of replicas of each shard to deploy for a Prometheus deployment.
## Number of replicas multiplied by shards is the total number of Pods created.
2020-12-18 00:46:15 +00:00
##
replicas : 1
2021-02-26 21:25:43 +00:00
## EXPERIMENTAL: Number of shards to distribute targets onto.
## Number of replicas multiplied by shards is the total number of Pods created.
## Note that scaling down shards will not reshard data onto remaining instances, it must be manually moved.
## Increasing shards will not reshard data either but it will continue to be available from the same instances.
## To query globally use Thanos sidecar and Thanos querier or remote write data to a central location.
## Sharding is done on the content of the `__address__` target meta-label.
##
shards : 1
2020-12-18 00:46:15 +00:00
## Log level for Prometheus be configured in
##
logLevel : info
## Log format for Prometheus be configured in
##
logFormat : logfmt
## Prefix used to register routes, overriding externalUrl route.
## Useful for proxies that rewrite URLs.
##
routePrefix : /
2021-04-15 13:03:52 +00:00
## Standard object's metadata. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata
2020-12-18 00:46:15 +00:00
## Metadata Labels and Annotations gets propagated to the prometheus pods.
##
podMetadata : {}
# labels:
# app: prometheus
# k8s-app: prometheus
## Pod anti-affinity can prevent the scheduler from placing Prometheus replicas on the same node.
## The default value "soft" means that the scheduler should *prefer* to not schedule two replica pods onto the same node but no guarantee is provided.
## The value "hard" means that the scheduler is *required* to not schedule two replica pods onto the same node.
## The value "" will disable pod anti-affinity so that no anti-affinity rules will be configured.
podAntiAffinity : ""
## If anti-affinity is enabled sets the topologyKey to use for anti-affinity.
## This can be changed to, for example, failure-domain.beta.kubernetes.io/zone
##
podAntiAffinityTopologyKey : kubernetes.io/hostname
## Assign custom affinity rules to the prometheus instance
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
## The remote_read spec configuration for Prometheus.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#remotereadspec
2020-12-18 00:46:15 +00:00
remoteRead : [ ]
# - url: http://remote1/read
2021-04-15 13:03:52 +00:00
## additionalRemoteRead is appended to remoteRead
additionalRemoteRead : [ ]
2020-12-18 00:46:15 +00:00
## The remote_write spec configuration for Prometheus.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#remotewritespec
2020-12-18 00:46:15 +00:00
remoteWrite : [ ]
# - url: http://remote1/push
2021-04-15 13:03:52 +00:00
## additionalRemoteWrite is appended to remoteWrite
additionalRemoteWrite : [ ]
2020-12-18 00:46:15 +00:00
## Enable/Disable Grafana dashboards provisioning for prometheus remote write feature
remoteWriteDashboards : false
## Resource limits & requests
##
resources : {}
# requests:
# memory: 400Mi
## Prometheus StorageSpec for persistent data
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/storage.md
2020-12-18 00:46:15 +00:00
##
storageSpec : {}
## Using PersistentVolumeClaim
##
# volumeClaimTemplate:
# spec:
# storageClassName: gluster
# accessModes: ["ReadWriteOnce"]
# resources:
# requests:
# storage: 50Gi
# selector: {}
## Using tmpfs volume
##
# emptyDir:
# medium: Memory
# Additional volumes on the output StatefulSet definition.
volumes : [ ]
# Additional VolumeMounts on the output StatefulSet definition.
volumeMounts : [ ]
## AdditionalScrapeConfigs allows specifying additional Prometheus scrape configurations. Scrape configurations
## are appended to the configurations generated by the Prometheus Operator. Job configurations must have the form
## as specified in the official Prometheus documentation:
## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config. As scrape configs are
## appended, the user is responsible to make sure it is valid. Note that using this feature may expose the possibility
## to break upgrades of Prometheus. It is advised to review Prometheus release notes to ensure that no incompatible
## scrape configs are going to break Prometheus after the upgrade.
2022-04-08 15:08:28 +00:00
## AdditionalScrapeConfigs can be defined as a list or as a templated string.
2020-12-18 00:46:15 +00:00
##
## The scrape configuration example below will find master nodes, provided they have the name .*mst.*, relabel the
## port to 2379 and allow etcd scraping provided it is running on all Kubernetes master nodes
##
additionalScrapeConfigs : [ ]
# - job_name: kube-etcd
# kubernetes_sd_configs:
# - role: node
# scheme: https
# tls_config:
# ca_file: /etc/prometheus/secrets/etcd-client-cert/etcd-ca
# cert_file: /etc/prometheus/secrets/etcd-client-cert/etcd-client
# key_file: /etc/prometheus/secrets/etcd-client-cert/etcd-client-key
# relabel_configs:
# - action: labelmap
# regex: __meta_kubernetes_node_label_(.+)
# - source_labels: [__address__]
# action: replace
# targetLabel: __address__
# regex: ([^:;]+):(\d+)
# replacement: ${1}:2379
# - source_labels: [__meta_kubernetes_node_name]
# action: keep
# regex: .*mst.*
# - source_labels: [__meta_kubernetes_node_name]
# action: replace
# targetLabel: node
# regex: (.*)
# replacement: ${1}
# metric_relabel_configs:
# - regex: (kubernetes_io_hostname|failure_domain_beta_kubernetes_io_region|beta_kubernetes_io_os|beta_kubernetes_io_arch|beta_kubernetes_io_instance_type|failure_domain_beta_kubernetes_io_zone)
# action: labeldrop
2022-04-08 15:08:28 +00:00
#
## If scrape config contains a repetitive section, you may want to use a template.
## In the following example, you can see how to define `gce_sd_configs` for multiple zones
# additionalScrapeConfigs: |
# - job_name: "node-exporter"
# gce_sd_configs:
# {{range $zone := .Values.gcp_zones}}
# - project: "project1"
# zone: "{{$zone}}"
# port: 9100
# {{end}}
# relabel_configs:
# ...
2020-12-18 00:46:15 +00:00
## If additional scrape configurations are already deployed in a single secret file you can use this section.
## Expected values are the secret name and key
## Cannot be used with additionalScrapeConfigs
additionalScrapeConfigsSecret : {}
# enabled: false
# name:
# key:
## additionalPrometheusSecretsAnnotations allows to add annotations to the kubernetes secret. This can be useful
## when deploying via spinnaker to disable versioning on the secret, strategy.spinnaker.io/versioned: 'false'
additionalPrometheusSecretsAnnotations : {}
## AdditionalAlertManagerConfigs allows for manual configuration of alertmanager jobs in the form as specified
## in the official Prometheus documentation https://prometheus.io/docs/prometheus/latest/configuration/configuration/#<alertmanager_config>.
## AlertManager configurations specified are appended to the configurations generated by the Prometheus Operator.
## As AlertManager configs are appended, the user is responsible to make sure it is valid. Note that using this
## feature may expose the possibility to break upgrades of Prometheus. It is advised to review Prometheus release
## notes to ensure that no incompatible AlertManager configs are going to break Prometheus after the upgrade.
##
additionalAlertManagerConfigs : [ ]
# - consul_sd_configs:
# - server: consul.dev.test:8500
# scheme: http
# datacenter: dev
# tag_separator: ','
# services:
# - metrics-prometheus-alertmanager
2021-07-14 16:15:47 +00:00
## If additional alertmanager configurations are already deployed in a single secret, or you want to manage
## them separately from the helm deployment, you can use this section.
## Expected values are the secret name and key
## Cannot be used with additionalAlertManagerConfigs
additionalAlertManagerConfigsSecret : {}
# name:
# key:
2022-08-24 15:13:39 +00:00
# optional: false
2021-07-14 16:15:47 +00:00
2020-12-18 00:46:15 +00:00
## AdditionalAlertRelabelConfigs allows specifying Prometheus alert relabel configurations. Alert relabel configurations specified are appended
## to the configurations generated by the Prometheus Operator. Alert relabel configurations specified must have the form as specified in the
## official Prometheus documentation: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#alert_relabel_configs.
## As alert relabel configs are appended, the user is responsible to make sure it is valid. Note that using this feature may expose the
## possibility to break upgrades of Prometheus. It is advised to review Prometheus release notes to ensure that no incompatible alert relabel
## configs are going to break Prometheus after the upgrade.
##
additionalAlertRelabelConfigs : [ ]
# - separator: ;
# regex: prometheus_replica
# replacement: $1
# action: labeldrop
2022-08-24 15:13:39 +00:00
## If additional alert relabel configurations are already deployed in a single secret, or you want to manage
## them separately from the helm deployment, you can use this section.
## Expected values are the secret name and key
## Cannot be used with additionalAlertRelabelConfigs
additionalAlertRelabelConfigsSecret : {}
# name:
# key:
2020-12-18 00:46:15 +00:00
## SecurityContext holds pod-level security attributes and common container settings.
## This defaults to non root user with uid 1000 and gid 2000.
2022-01-28 16:19:41 +00:00
## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md
2020-12-18 00:46:15 +00:00
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 1000
fsGroup : 2000
2023-08-22 13:42:24 +00:00
seccompProfile :
type : RuntimeDefault
2020-12-18 00:46:15 +00:00
2021-08-25 13:59:17 +00:00
## Priority class assigned to the Pods
2020-12-18 00:46:15 +00:00
##
priorityClassName : ""
## Thanos configuration allows configuring various aspects of a Prometheus server in a Thanos environment.
## This section is experimental, it may change significantly without deprecation notice in any release.
## This is experimental and may change significantly without backward compatibility in any release.
2022-01-28 16:19:41 +00:00
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#thanosspec
2020-12-18 00:46:15 +00:00
##
thanos : {}
2021-12-09 18:03:55 +00:00
# secretProviderClass:
# provider: gcp
# parameters:
# secrets: |
# - resourceName: "projects/$PROJECT_ID/secrets/testsecret/versions/latest"
# fileName: "objstore.yaml"
2023-11-27 12:45:06 +00:00
## ObjectStorageConfig configures object storage in Thanos.
# objectStorageConfig:
# # use existing secret, if configured, objectStorageConfig.secret will not be used
# existingSecret: {}
# # name: ""
# # key: ""
# # will render objectStorageConfig secret data and configure it to be used by Thanos custom resource,
# # ignored when prometheusspec.thanos.objectStorageConfig.existingSecret is set
# # https://thanos.io/tip/thanos/storage.md/#s3
# secret: {}
# # type: S3
# # config:
# # bucket: ""
# # endpoint: ""
# # region: ""
# # access_key: ""
# # secret_key: ""
2020-12-18 00:46:15 +00:00
## Containers allows injecting additional containers. This is meant to allow adding an authentication proxy to a Prometheus pod.
2021-08-25 13:59:17 +00:00
## if using proxy extraContainer update targetPort with proxy container port
2020-12-18 00:46:15 +00:00
containers : [ ]
2022-08-24 15:13:39 +00:00
# containers:
# - name: oauth-proxy
2023-11-27 12:45:06 +00:00
# image: quay.io/oauth2-proxy/oauth2-proxy:v7.5.1
2022-08-24 15:13:39 +00:00
# args:
2023-11-27 12:45:06 +00:00
# - --upstream=http://127.0.0.1:9090
2022-08-24 15:13:39 +00:00
# - --http-address=0.0.0.0:8081
2023-11-27 12:45:06 +00:00
# - --metrics-address=0.0.0.0:8082
2022-08-24 15:13:39 +00:00
# - ...
# ports:
# - containerPort: 8081
# name: oauth-proxy
# protocol: TCP
2023-11-27 12:45:06 +00:00
# - containerPort: 8082
# name: oauth-metrics
# protocol: TCP
2022-08-24 15:13:39 +00:00
# resources: {}
2020-12-18 00:46:15 +00:00
## InitContainers allows injecting additional initContainers. This is meant to allow doing some changes
## (permissions, dir tree) on mounted volumes before starting prometheus
initContainers : [ ]
## PortName to use for Prometheus.
##
2021-12-09 18:03:55 +00:00
portName : "http-web"
2020-12-18 00:46:15 +00:00
## ArbitraryFSAccessThroughSMs configures whether configuration based on a service monitor can access arbitrary files
## on the file system of the Prometheus container e.g. bearer token files.
arbitraryFSAccessThroughSMs : false
## OverrideHonorLabels if set to true overrides all user configured honor_labels. If HonorLabels is set in ServiceMonitor
## or PodMonitor to true, this overrides honor_labels to false.
overrideHonorLabels : false
## OverrideHonorTimestamps allows to globally enforce honoring timestamps in all scrape configs.
overrideHonorTimestamps : false
2024-04-04 13:39:36 +00:00
## When ignoreNamespaceSelectors is set to true, namespaceSelector from all PodMonitor, ServiceMonitor and Probe objects will be ignored,
## they will only discover targets within the namespace of the PodMonitor, ServiceMonitor and Probe object,
## and servicemonitors will be installed in the default service namespace.
## Defaults to false.
2020-12-18 00:46:15 +00:00
ignoreNamespaceSelectors : false
2021-03-22 09:23:27 +00:00
## EnforcedNamespaceLabel enforces adding a namespace label of origin for each alert and metric that is user created.
## The label value will always be the namespace of the object that is being created.
## Disabled by default
enforcedNamespaceLabel : ""
2020-12-18 00:46:15 +00:00
## PrometheusRulesExcludedFromEnforce - list of prometheus rules to be excluded from enforcing of adding namespace labels.
## Works only if enforcedNamespaceLabel set to true. Make sure both ruleNamespace and ruleName are set for each pair
2022-08-24 15:13:39 +00:00
## Deprecated, use `excludedFromEnforcement` instead
2021-03-22 09:23:27 +00:00
prometheusRulesExcludedFromEnforce : [ ]
2020-12-18 00:46:15 +00:00
2022-08-24 15:13:39 +00:00
## ExcludedFromEnforcement - list of object references to PodMonitor, ServiceMonitor, Probe and PrometheusRule objects
## to be excluded from enforcing a namespace label of origin.
## Works only if enforcedNamespaceLabel set to true.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#objectreference
excludedFromEnforcement : [ ]
2020-12-18 00:46:15 +00:00
## QueryLogFile specifies the file to which PromQL queries are logged. Note that this location must be writable,
## and can be persisted using an attached volume. Alternatively, the location can be set to a stdout location such
## as /dev/stdout to log querie information to the default Prometheus log stream. This is only available in versions
## of Prometheus >= 2.16.0. For more details, see the Prometheus docs (https://prometheus.io/docs/guides/query-log/)
queryLogFile : false
2024-04-04 13:39:36 +00:00
# Use to set global sample_limit for Prometheus. This act as default SampleLimit for ServiceMonitor or/and PodMonitor.
# Set to 'false' to disable global sample_limit. or set to a number to override the default value.
sampleLimit : false
# EnforcedKeepDroppedTargetsLimit defines on the number of targets dropped by relabeling that will be kept in memory.
# The value overrides any spec.keepDroppedTargets set by ServiceMonitor, PodMonitor, Probe objects unless spec.keepDroppedTargets
# is greater than zero and less than spec.enforcedKeepDroppedTargets. 0 means no limit.
enforcedKeepDroppedTargets : 0
2020-12-18 00:46:15 +00:00
## EnforcedSampleLimit defines global limit on number of scraped samples that will be accepted. This overrides any SampleLimit
## set per ServiceMonitor or/and PodMonitor. It is meant to be used by admins to enforce the SampleLimit to keep overall
## number of samples/series under the desired limit. Note that if SampleLimit is lower that value will be taken instead.
enforcedSampleLimit : false
2021-09-27 15:34:47 +00:00
## EnforcedTargetLimit defines a global limit on the number of scraped targets. This overrides any TargetLimit set
## per ServiceMonitor or/and PodMonitor. It is meant to be used by admins to enforce the TargetLimit to keep the overall
## number of targets under the desired limit. Note that if TargetLimit is lower, that value will be taken instead, except
## if either value is zero, in which case the non-zero value will be used. If both values are zero, no limit is enforced.
enforcedTargetLimit : false
## Per-scrape limit on number of labels that will be accepted for a sample. If more than this number of labels are present
## post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus versions
## 2.27.0 and newer.
enforcedLabelLimit : false
## Per-scrape limit on length of labels name that will be accepted for a sample. If a label name is longer than this number
## post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus versions
## 2.27.0 and newer.
enforcedLabelNameLengthLimit : false
## Per-scrape limit on length of labels value that will be accepted for a sample. If a label value is longer than this
## number post metric-relabeling, the entire scrape will be treated as failed. 0 means no limit. Only valid in Prometheus
## versions 2.27.0 and newer.
enforcedLabelValueLengthLimit : false
2020-12-18 00:46:15 +00:00
## AllowOverlappingBlocks enables vertical compaction and vertical query merge in Prometheus. This is still experimental
## in Prometheus so it may change in any upcoming release.
allowOverlappingBlocks : false
2022-10-27 12:27:42 +00:00
## Minimum number of seconds for which a newly created pod should be ready without any of its container crashing for it to
## be considered available. Defaults to 0 (pod will be considered available as soon as it is ready).
minReadySeconds : 0
2022-12-06 20:43:11 +00:00
# Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),
# because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working
# Use the host's network namespace if true. Make sure to understand the security implications if you want to enable it.
# When hostNetwork is enabled, this will set dnsPolicy to ClusterFirstWithHostNet automatically.
hostNetwork : false
2023-04-14 10:44:57 +00:00
# HostAlias holds the mapping between IP and hostnames that will be injected
# as an entry in the pod’ s hosts file.
hostAliases : [ ]
# - ip: 10.10.0.100
# hostnames:
# - a1.app.local
# - b1.app.local
2023-08-22 13:42:24 +00:00
## TracingConfig configures tracing in Prometheus.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#prometheustracingconfig
tracingConfig : {}
2023-11-27 12:45:06 +00:00
## Additional configuration which is not covered by the properties above. (passed through tpl)
additionalConfig : {}
## Additional configuration which is not covered by the properties above.
## Useful, if you need advanced templating inside alertmanagerSpec.
## Otherwise, use prometheus.prometheusSpec.additionalConfig (passed through tpl)
additionalConfigString : ""
2024-04-04 13:39:36 +00:00
## Defines the maximum time that the `prometheus` container's startup probe
## will wait before being considered failed. The startup probe will return
## success after the WAL replay is complete. If set, the value should be
## greater than 60 (seconds). Otherwise it will be equal to 600 seconds (15
## minutes).
maximumStartupDurationSeconds : 0
2020-12-18 00:46:15 +00:00
additionalRulesForClusterRole : [ ]
# - apiGroups: [ "" ]
# resources:
# - nodes/proxy
# verbs: [ "get", "list", "watch" ]
additionalServiceMonitors : [ ]
## Name of the ServiceMonitor to create
##
# - name: ""
## Additional labels to set used for the ServiceMonitorSelector. Together with standard labels from
## the chart
##
# additionalLabels: {}
## Service label for use in assembling a job name of the form <label value>-<port>
## If no label is specified, the service name is used.
##
# jobLabel: ""
## labels to transfer from the kubernetes service to the target
##
2021-02-26 21:25:43 +00:00
# targetLabels: []
## labels to transfer from the kubernetes pods to the target
##
# podTargetLabels: []
2020-12-18 00:46:15 +00:00
## Label selector for services to which this ServiceMonitor applies
##
# selector: {}
## Namespaces from which services are selected
##
# namespaceSelector:
## Match any namespace
##
# any: false
## Explicit list of namespace names to select
##
# matchNames: []
## Endpoints of the selected service to be monitored
##
# endpoints: []
## Name of the endpoint's service port
## Mutually exclusive with targetPort
# - port: ""
## Name or number of the endpoint's target port
## Mutually exclusive with port
# - targetPort: ""
## File containing bearer token to be used when scraping targets
##
# bearerTokenFile: ""
## Interval at which metrics should be scraped
##
# interval: 30s
## HTTP path to scrape for metrics
##
# path: /metrics
## HTTP scheme to use for scraping
##
# scheme: http
## TLS configuration to use when scraping the endpoint
##
# tlsConfig:
## Path to the CA file
##
# caFile: ""
## Path to client certificate file
##
# certFile: ""
## Skip certificate verification
##
# insecureSkipVerify: false
## Path to client key file
##
# keyFile: ""
## Server name used to verify host name
##
# serverName: ""
2023-11-27 12:45:06 +00:00
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
# metricRelabelings: []
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
# relabelings: []
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2020-12-18 00:46:15 +00:00
additionalPodMonitors : [ ]
## Name of the PodMonitor to create
##
# - name: ""
## Additional labels to set used for the PodMonitorSelector. Together with standard labels from
## the chart
##
# additionalLabels: {}
## Pod label for use in assembling a job name of the form <label value>-<port>
## If no label is specified, the pod endpoint name is used.
##
# jobLabel: ""
## Label selector for pods to which this PodMonitor applies
##
# selector: {}
## PodTargetLabels transfers labels on the Kubernetes Pod onto the target.
##
# podTargetLabels: {}
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
# sampleLimit: 0
## Namespaces from which pods are selected
##
# namespaceSelector:
## Match any namespace
##
# any: false
## Explicit list of namespace names to select
##
# matchNames: []
## Endpoints of the selected pods to be monitored
2022-01-28 16:19:41 +00:00
## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#podmetricsendpoint
2020-12-18 00:46:15 +00:00
##
# podMetricsEndpoints: []
2022-08-24 15:13:39 +00:00
## Configuration for thanosRuler
## ref: https://thanos.io/tip/components/rule.md/
##
thanosRuler :
## Deploy thanosRuler
##
enabled : false
## Annotations for ThanosRuler
##
annotations : {}
## Service account for ThanosRuler to use.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount :
create : true
name : ""
annotations : {}
## Configure pod disruption budgets for ThanosRuler
## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/#specifying-a-poddisruptionbudget
##
podDisruptionBudget :
enabled : false
minAvailable : 1
maxUnavailable : ""
ingress :
enabled : false
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
# ingressClassName: nginx
annotations : {}
labels : {}
## Hosts must be provided if Ingress is enabled.
##
hosts : [ ]
# - thanosruler.domain.com
## Paths to use for ingress rules - one path should match the thanosruler.routePrefix
##
paths : [ ]
# - /
## For Kubernetes >= 1.18 you should specify the pathType (determines how Ingress paths should be matched)
## See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#better-path-matching-with-path-types
# pathType: ImplementationSpecific
## TLS configuration for ThanosRuler Ingress
## Secret must be manually created in the namespace
##
tls : [ ]
# - secretName: thanosruler-general-tls
# hosts:
# - thanosruler.example.com
## Configuration for ThanosRuler service
##
service :
annotations : {}
labels : {}
clusterIP : ""
## Port for ThanosRuler Service to listen on
##
port : 10902
## To be used with a proxy extraContainer port
##
targetPort : 10902
## Port to expose on each node
## Only used if service.type is 'NodePort'
##
nodePort : 30905
## List of IP addresses at which the Prometheus server service is available
## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips
##
## Additional ports to open for ThanosRuler service
additionalPorts : [ ]
externalIPs : [ ]
loadBalancerIP : ""
loadBalancerSourceRanges : [ ]
## Denotes if this Service desires to route external traffic to node-local or cluster-wide endpoints
##
externalTrafficPolicy : Cluster
## Service type
##
type : ClusterIP
2024-04-04 13:39:36 +00:00
## Configuration for creating a ServiceMonitor for the ThanosRuler service
2022-08-24 15:13:39 +00:00
##
serviceMonitor :
2024-04-04 13:39:36 +00:00
## If true, create a serviceMonitor for thanosRuler
##
selfMonitor : true
2022-08-24 15:13:39 +00:00
## Scrape interval. If not set, the Prometheus default scrape interval is used.
##
interval : ""
2023-04-14 10:44:57 +00:00
## Additional labels
##
additionalLabels : {}
## SampleLimit defines per-scrape limit on number of scraped samples that will be accepted.
##
sampleLimit : 0
## TargetLimit defines a limit on the number of scraped targets that will be accepted.
##
targetLimit : 0
## Per-scrape limit on number of labels that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelLimit : 0
## Per-scrape limit on length of labels name that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelNameLengthLimit : 0
## Per-scrape limit on length of labels value that will be accepted for a sample. Only valid in Prometheus versions 2.27.0 and newer.
##
labelValueLengthLimit : 0
2022-08-24 15:13:39 +00:00
## proxyUrl: URL of a proxy that should be used for scraping.
##
proxyUrl : ""
## scheme: HTTP scheme to use for scraping. Can be used with `tlsConfig` for example if using istio mTLS.
scheme : ""
## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.
## Of type: https://github.com/coreos/prometheus-operator/blob/main/Documentation/api.md#tlsconfig
tlsConfig : {}
bearerTokenFile :
## MetricRelabelConfigs to apply to samples after scraping, but before ingestion.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
metricRelabelings : [ ]
# - action: keep
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
# sourceLabels: [__name__]
## RelabelConfigs to apply to samples before scraping
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#relabelconfig
##
relabelings : [ ]
# - sourceLabels: [__meta_kubernetes_pod_node_name]
# separator: ;
# regex: ^(.*)$
# targetLabel: nodename
# replacement: $1
# action: replace
2023-11-27 12:45:06 +00:00
## Additional Endpoints
##
additionalEndpoints : [ ]
# - port: oauth-metrics
# path: /metrics
2022-08-24 15:13:39 +00:00
## Settings affecting thanosRulerpec
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#thanosrulerspec
##
thanosRulerSpec :
## Standard object's metadata. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata
## Metadata Labels and Annotations gets propagated to the ThanosRuler pods.
##
podMetadata : {}
## Image of ThanosRuler
##
image :
2022-12-06 20:43:11 +00:00
registry : quay.io
repository : thanos/thanos
2024-04-04 13:39:36 +00:00
tag : v0.34.1
2022-08-24 15:13:39 +00:00
sha : ""
## Namespaces to be selected for PrometheusRules discovery.
## If nil, select own namespace. Namespaces to be selected for ServiceMonitor discovery.
## See https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#namespaceselector for usage
##
ruleNamespaceSelector : {}
## If true, a nil or {} value for thanosRuler.thanosRulerSpec.ruleSelector will cause the
## prometheus resource to be created with selectors based on values in the helm deployment,
## which will also match the PrometheusRule resources created
##
ruleSelectorNilUsesHelmValues : true
## PrometheusRules to be selected for target discovery.
## If {}, select all PrometheusRules
##
ruleSelector : {}
## Example which select all PrometheusRules resources
## with label "prometheus" with values any of "example-rules" or "example-rules-2"
# ruleSelector:
# matchExpressions:
# - key: prometheus
# operator: In
# values:
# - example-rules
# - example-rules-2
#
## Example which select all PrometheusRules resources with label "role" set to "example-rules"
# ruleSelector:
# matchLabels:
# role: example-rules
## Define Log Format
# Use logfmt (default) or json logging
logFormat : logfmt
## Log level for ThanosRuler to be configured with.
##
logLevel : info
## Size is the expected size of the thanosRuler cluster. The controller will eventually make the size of the
## running cluster equal to the expected size.
replicas : 1
## Time duration ThanosRuler shall retain data for. Default is '24h', and must match the regular expression
## [0-9]+(ms|s|m|h) (milliseconds seconds minutes hours).
##
retention : 24h
## Interval between consecutive evaluations.
##
evaluationInterval : ""
## Storage is the definition of how storage will be used by the ThanosRuler instances.
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/user-guides/storage.md
##
storage : {}
# volumeClaimTemplate:
# spec:
# storageClassName: gluster
# accessModes: ["ReadWriteOnce"]
# resources:
# requests:
# storage: 50Gi
# selector: {}
## AlertmanagerConfig define configuration for connecting to alertmanager.
## Only available with Thanos v0.10.0 and higher. Maps to the alertmanagers.config Thanos Ruler arg.
2023-11-27 12:45:06 +00:00
alertmanagersConfig :
# use existing secret, if configured, alertmanagersConfig.secret will not be used
existingSecret : {}
# name: ""
# key: ""
# will render render alertmanagersConfig secret data and configure it to be used by Thanos Ruler custom resource, ignored when alertmanagersConfig.existingSecret is set
# https://thanos.io/tip/components/rule.md/#alertmanager
secret : {}
# alertmanagers:
# - api_version: v2
# http_config:
# basic_auth:
# username: some_user
# password: some_pass
# static_configs:
# - alertmanager.thanos.io
# scheme: http
# timeout: 10s
2022-08-24 15:13:39 +00:00
## DEPRECATED. Define URLs to send alerts to Alertmanager. For Thanos v0.10.0 and higher, alertmanagersConfig should be used instead.
## Note: this field will be ignored if alertmanagersConfig is specified. Maps to the alertmanagers.url Thanos Ruler arg.
# alertmanagersUrl:
## The external URL the Thanos Ruler instances will be available under. This is necessary to generate correct URLs. This is necessary if Thanos Ruler is not served from root of a DNS name. string false
##
externalPrefix :
## The route prefix ThanosRuler registers HTTP handlers for. This is useful, if using ExternalURL and a proxy is rewriting HTTP routes of a request, and the actual ExternalURL is still true,
## but the server serves requests under a different route prefix. For example for use with kubectl proxy.
##
routePrefix : /
2023-11-27 12:45:06 +00:00
## ObjectStorageConfig configures object storage in Thanos
objectStorageConfig :
# use existing secret, if configured, objectStorageConfig.secret will not be used
existingSecret : {}
# name: ""
# key: ""
# will render objectStorageConfig secret data and configure it to be used by Thanos Ruler custom resource, ignored when objectStorageConfig.existingSecret is set
# https://thanos.io/tip/thanos/storage.md/#s3
secret : {}
# type: S3
# config:
# bucket: ""
# endpoint: ""
# region: ""
# access_key: ""
# secret_key: ""
2022-08-24 15:13:39 +00:00
2022-10-27 12:27:42 +00:00
## QueryEndpoints defines Thanos querier endpoints from which to query metrics.
## Maps to the --query flag of thanos ruler.
queryEndpoints : [ ]
## Define configuration for connecting to thanos query instances. If this is defined, the queryEndpoints field will be ignored.
## Maps to the query.config CLI argument. Only available with thanos v0.11.0 and higher.
2023-11-27 12:45:06 +00:00
queryConfig :
# use existing secret, if configured, queryConfig.secret will not be used
existingSecret : {}
# name: ""
# key: ""
# render queryConfig secret data and configure it to be used by Thanos Ruler custom resource, ignored when queryConfig.existingSecret is set
# https://thanos.io/tip/components/rule.md/#query-api
secret : {}
# - http_config:
# basic_auth:
# username: some_user
# password: some_pass
# static_configs:
# - URL
# scheme: http
# timeout: 10s
2022-10-27 12:27:42 +00:00
2022-08-24 15:13:39 +00:00
## Labels configure the external label pairs to ThanosRuler. A default replica
## label `thanos_ruler_replica` will be always added as a label with the value
## of the pod's name and it will be dropped in the alerts.
labels : {}
## If set to true all actions on the underlying managed objects are not going to be performed, except for delete actions.
##
paused : false
2024-04-04 13:39:36 +00:00
## Allows setting additional arguments for the ThanosRuler container
## ref: https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md#thanosruler
##
additionalArgs : [ ]
# - name: remote-write.config
# value: |-
# "remote_write":
# - "name": "receiver-0"
# "remote_timeout": "30s"
# "url": "http://thanos-receiver-0.thanos-receiver:8081/api/v1/receive"
2022-08-24 15:13:39 +00:00
## Define which Nodes the Pods are scheduled on.
## ref: https://kubernetes.io/docs/user-guide/node-selection/
##
nodeSelector : {}
## Define resources requests and limits for single Pods.
## ref: https://kubernetes.io/docs/user-guide/compute-resources/
##
resources : {}
# requests:
# memory: 400Mi
## Pod anti-affinity can prevent the scheduler from placing Prometheus replicas on the same node.
## The default value "soft" means that the scheduler should *prefer* to not schedule two replica pods onto the same node but no guarantee is provided.
## The value "hard" means that the scheduler is *required* to not schedule two replica pods onto the same node.
## The value "" will disable pod anti-affinity so that no anti-affinity rules will be configured.
##
podAntiAffinity : ""
## If anti-affinity is enabled sets the topologyKey to use for anti-affinity.
## This can be changed to, for example, failure-domain.beta.kubernetes.io/zone
##
podAntiAffinityTopologyKey : kubernetes.io/hostname
## Assign custom affinity rules to the thanosRuler instance
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
##
affinity : {}
# nodeAffinity:
# requiredDuringSchedulingIgnoredDuringExecution:
# nodeSelectorTerms:
# - matchExpressions:
# - key: kubernetes.io/e2e-az-name
# operator: In
# values:
# - e2e-az1
# - e2e-az2
## If specified, the pod's tolerations.
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
##
tolerations : [ ]
# - key: "key"
# operator: "Equal"
# value: "value"
# effect: "NoSchedule"
## If specified, the pod's topology spread constraints.
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
##
topologySpreadConstraints : [ ]
# - maxSkew: 1
# topologyKey: topology.kubernetes.io/zone
# whenUnsatisfiable: DoNotSchedule
# labelSelector:
# matchLabels:
# app: thanos-ruler
## SecurityContext holds pod-level security attributes and common container settings.
## This defaults to non root user with uid 1000 and gid 2000. *v1.PodSecurityContext false
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
##
securityContext :
runAsGroup : 2000
runAsNonRoot : true
runAsUser : 1000
fsGroup : 2000
2023-08-22 13:42:24 +00:00
seccompProfile :
type : RuntimeDefault
2022-08-24 15:13:39 +00:00
## ListenLocal makes the ThanosRuler server listen on loopback, so that it does not bind against the Pod IP.
## Note this is only for the ThanosRuler UI, not the gossip communication.
##
listenLocal : false
## Containers allows injecting additional containers. This is meant to allow adding an authentication proxy to an ThanosRuler pod.
##
containers : [ ]
# Additional volumes on the output StatefulSet definition.
volumes : [ ]
# Additional VolumeMounts on the output StatefulSet definition.
volumeMounts : [ ]
## InitContainers allows injecting additional initContainers. This is meant to allow doing some changes
## (permissions, dir tree) on mounted volumes before starting prometheus
initContainers : [ ]
## Priority class assigned to the Pods
##
priorityClassName : ""
## PortName to use for ThanosRuler.
##
portName : "web"
## ExtraSecret can be used to store various data in an extra secret
## (use it for example to store hashed basic auth credentials)
extraSecret :
## if not set, name will be auto generated
# name: ""
annotations : {}
data : {}
# auth: |
# foo:$apr1$OFG3Xybp$ckL0FHDAkoXYIlH9.cysT0
# someoneelse:$apr1$DMZX2Z4q$6SbQIfyuLQd.xmo/P0m2c.
## Setting to true produces cleaner resource names, but requires a data migration because the name of the persistent volume changes. Therefore this should only be set once on initial installation.
##
cleanPrometheusOperatorObjectNames : false
2023-08-22 13:42:24 +00:00
## Extra manifests to deploy as an array
extraManifests : [ ]
# - apiVersion: v1
# kind: ConfigMap
# metadata:
# labels:
# name: prometheus-extra
# data:
# extra-data: "value"