# Values for the k3d (level 2) cluster only. Kept lean so the whole stack fits
# alongside the app on a laptop-sized machine.
#
# No credentials here. Grafana's admin password is generated by the chart into a
# secret; read it with:
#   kubectl -n observability get secret kube-prometheus-stack-grafana \
#     -o jsonpath='{.data.admin-password}' | base64 -d

# k3s does not expose these the way a kubeadm cluster does. Left enabled they
# produce permanently-firing "target down" alerts that bury the real ones.
kubeEtcd:
  enabled: false
kubeProxy:
  enabled: false

kubeControllerManager:
  service:
    port: 10257
    targetPort: 10257
  serviceMonitor:
    https: true
    insecureSkipVerify: true
kubeScheduler:
  service:
    port: 10259
    targetPort: 10259
  serviceMonitor:
    https: true
    insecureSkipVerify: true

prometheus:
  prometheusSpec:
    retention: 6h
    resources:
      requests: {cpu: 100m, memory: 512Mi}
      limits: {memory: 1500Mi}
    # Pick up ServiceMonitors from every namespace, not just the chart's own
    # release. The app lives in `nereus` and must be scraped from there.
    serviceMonitorSelectorNilUsesHelmValues: false
    podMonitorSelectorNilUsesHelmValues: false
    ruleSelectorNilUsesHelmValues: false
    storageSpec:
      volumeClaimTemplate:
        spec:
          accessModes: [ReadWriteOnce]
          resources:
            requests:
              storage: 5Gi

grafana:
  defaultDashboardsTimezone: browser
  resources:
    requests: {cpu: 50m, memory: 128Mi}
    limits: {memory: 512Mi}

alertmanager:
  alertmanagerSpec:
    resources:
      requests: {cpu: 25m, memory: 64Mi}
      limits: {memory: 256Mi}

prometheusOperator:
  resources:
    requests: {cpu: 50m, memory: 128Mi}
    limits: {memory: 512Mi}