apiVersion: v1
kind: Namespace
metadata:
  name: monitoring
  labels:
    pod-security.kubernetes.io/enforce: privileged
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: kube-prometheus-stack
  namespace: argocd
spec:
  project: default
  destination:
    server: {{ .Values.spec.destination.server }}
    namespace: monitoring
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
    - ServerSideApply=true
  source:
    chart: kube-prometheus-stack
    repoURL: https://prometheus-community.github.io/helm-charts
    targetRevision: 71.2.0
    helm:
      valuesObject:
        crds:
          enabled: true
        defaultRules:
          create: true
        windowsMonitoring:
          enabled: false
        alertmanager:
          enabled: false
        grafana:
          enabled: true
          ingress:
            enabled: true
            annotations:
              traefik.ingress.kubernetes.io/router.entrypoints: websecure
            hosts:
              - grafana.noxxos.nl
          grafana.ini:
            auth.anonymous:
              enabled: true
              org_name: Main Org.
              org_role: Viewer
            security:
              allow_embedding: true
        kubeProxy:
          enabled: false
        kubeEtcd:
          enabled: false
        kubeControllerManager:
          enabled: false
        nodeExporter:
          enabled: true
        prometheusOperator:
          logFormat: json
        prometheus:
          ingress:
            enabled: true
            annotations:
              traefik.ingress.kubernetes.io/router.entrypoints: websecure
            hosts:
              - prometheus.noxxos.nl
          serviceMonitor:
            selfMonitor: false
          prometheusSpec:
            scrapeInterval: 30s
            retention: 5y
            replicas: 1
            logLevel: debug
            logFormat: json
            scrapeConfigSelectorNilUsesHelmValues: false
            serviceMonitorSelectorNilUsesHelmValues: false
            podMonitorSelectorNilUsesHelmValues: false
            ruleSelectorNilUsesHelmValues: false
            resources:
              requests:
                cpu: 150m
                memory: 700Mi
              limits:
                memory: 900Mi
            storageSpec:
              volumeClaimTemplate:
                spec:
                  storageClassName: rbd-slow
                  accessModes: ["ReadWriteOnce"]
                  resources:
                    requests:
                      storage: 100Gi