# status: implemented

# https://github.com/prometheus-operator/kube-prometheus/issues/913#issuecomment-670784017
kubeControllerManager:
  service:
    targetPort: 10257
  serviceMonitor:
    https: true
    insecureSkipVerify: true
# proxy not working, svc not exposed by port
kubeProxy:
  service:
    targetPort: 10249
  serviceMonitor:
    https: true
    insecureSkipVerify: true
##################

prometheus:
  prometheusSpec:
    serviceMonitorSelector: {}
    # shards: null
    # https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml#L2681
    # additionalScrapeConfigs:
    # - job_name: muc-kitchen
    #   scrape_interval: 1m
    #   basic_auth:
    #     username: ahfahfoozuVeezoong6c
    #     password: aeThoom4deiNgeici0Th
    #   static_configs:
    #   - targets: [ 'dyndns-muc.moritzgraf.de:60200']
    #     labels:
    #       namespace: monitoring
    # - job_name: muc-living
    #   scrape_interval: 1m
    #   basic_auth:
    #     username: Gul3zooSa5Waphophuag
    #     password: eeLie9Mai9ahfi5ahy2i
    #   static_configs:
    #   - targets: [ 'dyndns-muc.moritzgraf.de:60201']
    #     labels:
    #       namespace: monitoring
    # - job_name: rgbg-living
    #   scrape_interval: 1m
    #   basic_auth:
    #     username: oot6ainge9aef6iaf4Cu
    #     password: oonohNaej6soh7TooPha
    #   static_configs:
    #   - targets: [ 'dyndns.moritzgraf.de:60200']
    #     labels:
    #       namespace: monitoring
    storageSpec:
      ## Using PersistentVolumeClaim
      ##
      volumeClaimTemplate:
        spec:
          storageClassName: openebs-hostpath
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 50Gi
  ingress: 
    enabled: true
    hosts: 
    - prometheus.haumdaucher.de
    tls:
    - hosts:
      - "prometheus.haumdaucher.de"
      secretName: prometheus-haumdaucher-de
    annotations:
      kubernetes.io/ingress.class: "nginx"    
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      cert-manager.io/cluster-issuer: "letsencrypt-prod"
      # see https://kubernetes.github.io/ingress-nginx/examples/auth/basic/
      nginx.ingress.kubernetes.io/auth-secret: prometheus-auth
      nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - jamaan'
  # prometheusSpec:
  #   scrapeInterval: "300s"
  logLevel: debug

  extraSecret:
    name: "prometheus-auth"
    annotations: {}
    # moritz Vaej6Quiequ4vo0jaeRa
    data:
      auth: |
        moritz:$2y$05$ZzkskylHGf.2FNy5EhJIWeXrz/oRCe8IXfxLCpp1uIzqoARPWCRLm
alertmanager:
  enabled: true
  ingress: 
    enabled: true
    hosts: 
    - alertmanager.haumdaucher.de
    tls:
    - hosts:
      - "alertmanager.haumdaucher.de"
      secretName: alertmanager-haumdaucher-de
    annotations:
      kubernetes.io/ingress.class: "nginx"    
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      cert-manager.io/cluster-issuer: "letsencrypt-prod"
      # see https://kubernetes.github.io/ingress-nginx/examples/auth/basic/
      nginx.ingress.kubernetes.io/auth-type: basic
      nginx.ingress.kubernetes.io/auth-secret: prometheus-auth
      nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - jamaan'
  alertmanagerSpec:
    alertmanagerConfigSelector:
      matchExpressions:
        - key: alertmanagerConfig
          operator: In
          values:
            - haumdaucher
    storage:
      ## Using PersistentVolumeClaim
      ##
      volumeClaimTemplate:
        spec:
          storageClassName: openebs-hostpath
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 1Gi
grafana:
  persistence:
    enabled: true
  imageRenderer:
    enabled: true
  adminPassword: kohkohh5sah1Do3ize2x
  ingress:
    enabled: true
    hosts: 
    - grafana.haumdaucher.de
    tls:
    - hosts:
      - "grafana.haumdaucher.de"
      secretName: grafana-haumdaucher-de
    annotations:
      kubernetes.io/ingress.class: "nginx"    
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      cert-manager.io/cluster-issuer: "letsencrypt-prod"
  env:
    # GF_DATE_FORMATS_INTERVAL_HOUR: "DD/MM HH:mm"
    GF_DATE_FORMATS_INTERVAL_DAY: "MMM YYYY"
  # grafana.ini:
  #   date_format:
  #     interval_second: "HH:mm:ss"
  #     interval_minute: "HH:mm"
  #     interval_hour: "MM/DD HH:mm"
  #     interval_day: "MMM YYYY"
  #     interval_month: "YYYY-MM"
  #     interval_year: "YYYY"