homelab-v/k8s/infra/monitoring/kube-prometheus-stack/values.yaml

# https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml
prometheus:
  prometheusSpec:
    podMonitorNamespaceSelector: { }
    podMonitorSelectorNilUsesHelmValues: false
    podMonitorSelector: { }
    serviceMonitorNamespaceSelector: { }
    serviceMonitorSelectorNilUsesHelmValues: false
    serviceMonitorSelector: { }
    nodeSelector:
      topology.kubernetes.io/zone: abel
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: proxmox-csi
          volumeName: pv-prometheus
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 20G
          selector:
            matchLabels:
              app: prometheus

# https://github.com/siderolabs/talos/discussions/7214
kubeControllerManager:
  enabled: true
  serviceMonitor:
    relabelings:
      - sourceLabels: [ __meta_kubernetes_pod_node_name ]
        separator: ;
        regex: ^(.*)$
        targetLabel: nodename
        replacement: $1
        action: replace
    metricRelabelings:
      - action: labeldrop
        regex: pod

kubeEtcd:
  enabled: true
  service:
    selector:
      # etcd doesn't run as a container,
      # but most probably runs on the same nodes that host a controller
      k8s-app: kube-controller-manager
  serviceMonitor:
    relabelings:
      - sourceLabels: [ __meta_kubernetes_pod_node_name ]
        separator: ;
        regex: ^(.*)$
        targetLabel: nodename
        replacement: $1
        action: replace
    metricRelabelings:
      - action: labeldrop
        regex: pod

kubeProxy:
  # Cilium replaces Kube Proxy
  enabled: false


kubeScheduler:
  enabled: true
  serviceMonitor:
    relabelings:
      - sourceLabels: [ __meta_kubernetes_pod_node_name ]
        separator: ;
        regex: ^(.*)$
        targetLabel: nodename
        replacement: $1
        action: replace
    metricRelabelings:
      - action: labeldrop
        regex: pod

nodeExporter:
  enabled: true

grafana:
  enabled: true
  envFromSecrets: [ { name: grafana-oidc-credentials } ]
  grafana.ini:
    security:
      disable_initial_admin_creation: false
      admin_user: $__env{GF_SECURITY_ADMIN_USER}
      admin_password: $__env{GF_SECURITY_ADMIN_PASSWORD}
    paths:
      data: "/var/lib/grafana/"
      logs: "/var/log/grafana"
      plugins: "/var/lib/grafana/plugins"
      provisioning: "/etc/grafana/provisioning"
    analytics:
      check_for_updates: false
    log:
      mode: console
    server:
      root_url: https://grafana.stonegarden.dev
    auth.basic:
      enabled: true
    auth.generic_oauth:
      enabled: true
      name: Authelia
      client_id: $__env{OIDC_CLIENT_ID}
      client_secret: $__env{OIDC_CLIENT_SECRET}
      auth_style: InHeader
      scopes: openid email profile offline_access grafana
      empty_scopes: false
      use_pkce: true
      use_refresh_token: true
      auth_url: https://authelia.stonegarden.dev/api/oidc/authorization
      token_url: https://authelia.stonegarden.dev/api/oidc/token
      api_url: https://authelia.stonegarden.dev/api/oidc/userinfo
      signout_redirect_url: https://authelia.stonegarden.dev/logout
      login_attribute_path: preferred_username
      name_attribute_path: name
      allow_assign_grafana_admin: true
      role_attribute_path: contains(grafana[*], 'grafana_admin') && 'GrafanaAdmin' || contains(grafana[*], 'admin') && 'Admin' || contains(grafana[*], 'editor') && 'Editor' || 'Viewer'
      auto_login: true
  defaultDashboardsEnabled: true
  defaultDashboardsTimezone: Europe/Oslo
  # https://github.com/grafana/helm-charts/issues/527#issuecomment-982319638
  sidecar:
    dashboards:
      enabled: true
      searchNamespace: ALL
      folder: /tmp/dashboards
      folderAnnotation: grafana_folder
      annotations:
        grafana_folder: "Kubernetes"
      provider:
        allowUiUpdates: false
        foldersFromFilesStructure: true

    datasources:
      enabled: true