# https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml
prometheus:
  prometheusSpec:
    podMonitorNamespaceSelector: { }
    podMonitorSelectorNilUsesHelmValues: false
    podMonitorSelector: { }
    serviceMonitorNamespaceSelector: { }
    serviceMonitorSelectorNilUsesHelmValues: false
    serviceMonitorSelector: { }
    nodeSelector:
      topology.kubernetes.io/zone: abel
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: proxmox-csi
          volumeName: pv-prometheus
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 10G
          selector:
            matchLabels:
              app: prometheus

nodeExporter:
  enabled: false

grafana:
  enabled: true
  envFromSecrets: [ {name: grafana-oidc-credentials } ]
  grafana.ini:
    security:
      disable_initial_admin_creation: true
    paths:
      data: "/var/lib/grafana/"
      logs: "/var/log/grafana"
      plugins: "/var/lib/grafana/plugins"
      provisioning: "/etc/grafana/provisioning"
    analytics:
      check_for_updates: false
    log:
      mode: console
    server:
      root_url: https://grafana.stonegarden.dev
    auth.basic:
      enabled: false
    auth.generic_oauth:
      enabled: true
      name: Authelia
      client_id: "${OIDC_CLIENT_ID}"
      client_secret: "${OIDC_CLIENT_SECRET}"
      auth_style: InHeader
      scopes: openid email profile offline_access grafana
      empty_scopes: false
      use_pkce: true
      use_refresh_token: true
      auth_url: https://authelia.stonegarden.dev/api/oidc/authorization
      token_url: https://authelia.stonegarden.dev/api/oidc/token
      api_url: https://authelia.stonegarden.dev/api/oidc/userinfo
      signout_redirect_url: https://authelia.stonegarden.dev/logout
      login_attribute_path: preferred_username
      name_attribute_path: name
      allow_assign_grafana_admin: true
      role_attribute_path: contains(grafana[*], 'grafana_admin') && 'GrafanaAdmin' || contains(grafana[*], 'admin') && 'Admin' || contains(grafana[*], 'editor') && 'Editor' || 'Viewer'
      auto_login: true
  defaultDashboardsEnabled: true
  defaultDashboardsTimezone: Europe/Oslo
  # https://github.com/grafana/helm-charts/issues/527#issuecomment-982319638
  sidecar:
    dashboards:
      enabled: true
      searchNamespace: ALL
      folder: /tmp/dashboards
      folderAnnotation: grafana_folder
      annotations:
        grafana_folder: "Kubernetes"
      provider:
        allowUiUpdates: false
        foldersFromFilesStructure: true

    datasources:
      enabled: true