values.yaml

config:
  clients:
    - url: 'http://loki-gateway.loki.svc.cluster.local:80/loki/api/v1/push'

  snippets:
    extraScrapeConfigs: >
      - job_name: systemd-messages
        static_configs:
          - targets: [localhost]
            labels:
              job: varlogs
              host: "${NODE_HOSTNAME}"
              __path__: /var/log/*
        relabel_configs:
          - source_labels:
            - __journal_systemd_unit
            target_label: systemd_unit
          - source_labels:
            - __journal_hostname
            target_label: nodename
          - source_labels:
            - __journal_syslog_identifier
            target_label: syslog_identifier

containerSecurityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL
  privileged: false
  readOnlyRootFilesystem: true
  runAsUser: 0
  seLinuxOptions:
    type: spc_t
extraArgs:
  - '-config.expand-env=true'

extraEnv:
  - name: NODE_HOSTNAME
    valueFrom:
      fieldRef:
        fieldPath: spec.nodeName

extraVolumes:
  - hostPath:
      path: /var/log
    name: varlog
  - hostPath:
      path: /etc
    name: machine-id

extraVolumeMounts:
  - mountPath: /var/log
    name: varlog
    readOnly: true
  - mountPath: /etc/machine-id
    name: machine-id
    readOnly: true
    subPath: machine-id

resources:
  limits:
    cpu: 500m
    memory: 750Mi
  requests:
    cpu: 100m
    memory: 256Mi

# Below fails individual test when enabled since the crd is not there
serviceMonitor:
  annotations: {}
  enabled: false
  interval: null
  labels: {}
  metricRelabelings: []
  namespace: null
  namespaceSelector: {}
  prometheusRule:
    additionalLabels: {}
    enabled: false
    rules: []
  relabelings: []
  scheme: https
  scrapeTimeout: null
  targetLabels: []
  tlsConfig:
    caFile: /etc/prom-certs/root-cert.pem
    certFile: /etc/prom-certs/cert-chain.pem
    insecureSkipVerify: true
    keyFile: /etc/prom-certs/key.pem