alertmanager:
  ingress:
    enabled: true
    annotations: 
      cert-manager.io/cluster-issuer: letsencrypt-production-issuer
      kubernetes.io/ingress.class: traefik
      ingress.kubernetes.io/auth-secret: "kps-admin-users"
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      traefik.ingress.kubernetes.io/router.tls: "true"

    hosts:
      - alertmanager.kps.k3s.sapian.cloud
    tls:
    - secretName: alertmanager-kps-general-tls
      hosts:
      - alertmanager.kps.k3s.sapian.cloud
prometheus-node-exporter:
  hostNetwork: false
prometheus:
  ingress:
    enabled: true
    annotations: 
      cert-manager.io/cluster-issuer: letsencrypt-production-issuer
      kubernetes.io/ingress.class: traefik
      ingress.kubernetes.io/auth-secret: "kps-admin-users"
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      traefik.ingress.kubernetes.io/router.tls: "true"
    hosts: 
      - prometheus.kps.k3s.sapian.cloud
    tls:
      - secretName: prometheus.kps.general-tls
        hosts:
          - prometheus.kps.k3s.sapian.cloud
  prometheusSpec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchExpressions:
            - key: sapian-k3s-role
              operator: In
              values:
              - agent
            - key: sapian-agent-dc
              operator: In
              values:
              - ssdnodes-seattle
    additionalScrapeConfigsSecret:
      enabled: true
      name: additional-scrape-configs
      key: prometheus-additional.yaml
    resources:
      limits:
        cpu: 2000m
        memory: 6Gi
      requests:
        cpu: 1000m
        memory: 2Gi
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: longhorn-ssdnodes-seattle
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 100Gi