65 lines
1.7 KiB
YAML
65 lines
1.7 KiB
YAML
# Values for the k3d (level 2) cluster only. Kept lean so the whole stack fits
|
|
# alongside the app on a laptop-sized machine.
|
|
#
|
|
# No credentials here. Grafana's admin password is generated by the chart into a
|
|
# secret; read it with:
|
|
# kubectl -n observability get secret kube-prometheus-stack-grafana \
|
|
# -o jsonpath='{.data.admin-password}' | base64 -d
|
|
|
|
# k3s does not expose these the way a kubeadm cluster does. Left enabled they
|
|
# produce permanently-firing "target down" alerts that bury the real ones.
|
|
kubeEtcd:
|
|
enabled: false
|
|
kubeProxy:
|
|
enabled: false
|
|
|
|
kubeControllerManager:
|
|
service:
|
|
port: 10257
|
|
targetPort: 10257
|
|
serviceMonitor:
|
|
https: true
|
|
insecureSkipVerify: true
|
|
kubeScheduler:
|
|
service:
|
|
port: 10259
|
|
targetPort: 10259
|
|
serviceMonitor:
|
|
https: true
|
|
insecureSkipVerify: true
|
|
|
|
prometheus:
|
|
prometheusSpec:
|
|
retention: 6h
|
|
resources:
|
|
requests: {cpu: 100m, memory: 512Mi}
|
|
limits: {memory: 1500Mi}
|
|
# Pick up ServiceMonitors from every namespace, not just the chart's own
|
|
# release. The app lives in `nereus` and must be scraped from there.
|
|
serviceMonitorSelectorNilUsesHelmValues: false
|
|
podMonitorSelectorNilUsesHelmValues: false
|
|
ruleSelectorNilUsesHelmValues: false
|
|
storageSpec:
|
|
volumeClaimTemplate:
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
resources:
|
|
requests:
|
|
storage: 5Gi
|
|
|
|
grafana:
|
|
defaultDashboardsTimezone: browser
|
|
resources:
|
|
requests: {cpu: 50m, memory: 128Mi}
|
|
limits: {memory: 512Mi}
|
|
|
|
alertmanager:
|
|
alertmanagerSpec:
|
|
resources:
|
|
requests: {cpu: 25m, memory: 64Mi}
|
|
limits: {memory: 256Mi}
|
|
|
|
prometheusOperator:
|
|
resources:
|
|
requests: {cpu: 50m, memory: 128Mi}
|
|
limits: {memory: 512Mi}
|