prometheus

Helm chart

Last changed

Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Tag:

Compare:

# yaml-language-server: $schema=values.schema.json

# Default values for prometheus.

# This is a YAML-formatted file.

# Declare variables to be passed into your templates.

rbac:

create: true

imagePullSecrets: []

# - name: "image-pull-secret"

## Define serviceAccount names for components. Defaults to component's fully qualified name.

serviceAccounts:

server:

create: true

annotations: {}

## Opt out of automounting Kubernetes API credentials.

## It will be overridden by server.automountServiceAccountToken value, if set.

# automountServiceAccountToken: false

## Additional labels to attach to all resources

commonMetaLabels: {}

## Monitors ConfigMap changes and POSTs to a URL

## Ref: https://github.com/prometheus-operator/prometheus-operator/tree/main/cmd/prometheus-config-reloader

configmapReload:

## URL for configmap-reload to use for reloads

reloadUrl: ""

## env sets environment variables to pass to the container. Can be set as name/value pairs,

## read from secrets or configmaps.

env: []

# - name: SOMEVAR

# value: somevalue

# - name: PASSWORD

# valueFrom:

# secretKeyRef:

# name: mysecret

# key: password

# optional: false

prometheus:

## If false, the configmap-reload container will not be deployed

enabled: true

## configmap-reload container name

## configmap-reload container image

image:

repository: cgr.dev/chainguard-private/prometheus-config-reloader

tag: 0.94.0

# When digest is set to a non-empty value, images will be pulled by digest (regardless of tag value).

digest: sha256:9084807acf891491a3b59c2969f993abca88d2a3c40feb5f1fd60fa1fa2e03cd

pullPolicy: IfNotPresent

## config-reloader's container port and port name for probes and metrics

containerPort: 8080

containerPortName: metrics

## Additional configmap-reload container arguments

## Set to null for argumentless flags

extraArgs: {}

## Additional configmap-reload volume directories

extraVolumeDirs: []

## Additional configmap-reload volume mounts

extraVolumeMounts: []

## Additional configmap-reload mounts

extraConfigmapMounts: []

# - name: prometheus-alerts

# mountPath: /etc/alerts.d

# subPath: ""

# configMap: prometheus-alerts

# readOnly: true

## Security context to be added to configmap-reload container

containerSecurityContext: {}

## Settings for Prometheus reloader's readiness, liveness and startup probes

## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/

livenessProbe:

httpGet:

path: /healthz

port: metrics

scheme: HTTP

periodSeconds: 10

initialDelaySeconds: 2

readinessProbe:

httpGet:

path: /healthz

port: metrics

scheme: HTTP

periodSeconds: 10

startupProbe:

enabled: false

httpGet:

100

path: /healthz

101

port: metrics

102

scheme: HTTP

103

periodSeconds: 10

104

## configmap-reload resource requests and limits

105

## Ref: http://kubernetes.io/docs/user-guide/compute-resources/

106

107

resources: {}

108

server:

109

## Prometheus server container name

110

111

112

## Opt out of automounting Kubernetes API credentials.

113

## If set it will override serviceAccounts.server.automountServiceAccountToken value for ServiceAccount.

114

# automountServiceAccountToken: false

115

116

## If set it will override prometheus.server.fullname value for ClusterRole and ClusterRoleBinding

117

118

clusterRoleNameOverride: ""

119

## Name of an existing cluster role to use in a role binding in namespaces set in

120

## namespaces and releaseNamespace for namespaced discovery.

121

122

useExistingClusterRoleName: ""

123

## releaseNamespace to enable only the release namespace for service discovery.

124

## By default all namespaces are included in service discovery.

125

## If releaseNamespace and namespaces are both set, a merged list will be created.

126

## Note that kubernetes_sd_configs.namespaces in scrape configs must be specified

127

## if namespaced service discovery is desired. Setting useExistingClusterRoleName is required.

128

129

releaseNamespace: false

130

## namespaces to include in service discovery instead of clusterwide discovery. Needed if you want to run

131

## Prometheus without cluster-admin privileges (namespaced configuration). See also releaseNamespace.

132

## Setting useExistingClusterRoleName is required.

133

134

namespaces: []

135

# - yournamespace

136

137

# sidecarContainers - add more containers to prometheus server

138

# Key/Value where Key is the sidecar `- name: <Key>`

139

# Example:

140

# sidecarContainers:

141

# webserver:

142

# image: nginx

143

# OR for adding OAuth authentication to Prometheus

144

# sidecarContainers:

145

# oauth-proxy:

146

# image: quay.io/oauth2-proxy/oauth2-proxy

147

# args:

148

# - --upstream=http://127.0.0.1:9090

149

# - --http-address=0.0.0.0:8081

150

# - ...

151

# ports:

152

# - containerPort: 8081

153

# name: oauth-proxy

154

# protocol: TCP

155

# resources: {}

156

sidecarContainers: {}

157

# sidecarTemplateValues - context to be used in template for sidecarContainers

158

# Example:

159

# sidecarTemplateValues: *your-custom-globals

160

# sidecarContainers:

161

# webserver: |-

162

# {{ include "webserver-container-template" . }}

163

# Template for `webserver-container-template` might looks like this:

164

# image: "{{ .Values.server.sidecarTemplateValues.repository }}:{{ .Values.server.sidecarTemplateValues.tag }}"

165

# ...

166

167

sidecarTemplateValues: {}

168

## Prometheus server container image

169

170

image:

171

repository: cgr.dev/chainguard-private/prometheus

172

# If not set appVersion field from Chart.yaml is used. Supports templating.

173

tag: 3.14.0

174

# When digest is set to a non-empty value, images will be pulled by digest (regardless of tag value).

175

digest: sha256:e7ab8e9a7bda2fbdb0b3b5aac7f7e23ac551e96f9ebc3dff32bdbc2bd31c57a1

176

# Use the distroless image variant.

177

distroless: false

178

pullPolicy: IfNotPresent

179

## Prometheus server command

180

181

command: []

182

## prometheus server priorityClassName

183

184

priorityClassName: ""

185

## prometheus server runtimeClassName

186

187

runtimeClassName: ""

188

## EnableServiceLinks indicates whether information about services should be injected

189

## into pod's environment variables, matching the syntax of Docker links.

190

## WARNING: the field is unsupported and will be skipped in K8s prior to v1.13.0.

191

192

enableServiceLinks: true

193

## The URL prefix at which the container can be accessed. Useful in the case the '-web.external-url' includes a slug

194

## so that the various internal URLs are still able to access as they are in the default case.

195

## (Optional)

196

prefixURL: ""

197

## External URL which can access prometheus

198

## Maybe same with Ingress host name

199

baseURL: ""

200

## Additional server container environment variables

201

202

## You specify this manually like you would a raw deployment manifest.

203

## This means you can bind in environment variables from secrets.

204

205

## e.g. static environment variable:

206

## - name: DEMO_GREETING

207

## value: "Hello from the environment"

208

209

## e.g. secret environment variable:

210

## - name: USERNAME

211

## valueFrom:

212

## secretKeyRef:

213

## name: mysecret

214

## key: username

215

env: []

216

# List of flags to override default parameters, e.g:

217

# - --enable-feature=agent

218

# - --storage.agent.retention.max-time=30m

219

# - --config.file=/etc/config/prometheus.yml

220

defaultFlagsOverride: []

221

extraFlags:

222

- web.enable-lifecycle

223

## web.enable-admin-api flag controls access to the administrative HTTP API which includes functionality such as

224

## deleting time series. This is disabled by default.

225

# - web.enable-admin-api

226

227

## storage.tsdb.no-lockfile flag controls BD locking

228

# - storage.tsdb.no-lockfile

229

230

## storage.tsdb.wal-compression flag enables compression of the write-ahead log (WAL)

231

# - storage.tsdb.wal-compression

232

## Path to a configuration file on prometheus server container FS

233

configPath: /etc/config/prometheus.yml

234

### The data directory used by prometheus to set --storage.tsdb.path

235

### When empty server.persistentVolume.mountPath is used instead

236

storagePath: ""

237

global:

238

## How frequently to scrape targets by default

239

240

scrape_interval: 1m

241

## How long until a scrape request times out

242

243

scrape_timeout: 10s

244

## How frequently to evaluate rules

245

246

evaluation_interval: 1m

247

## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#remote_write

248

249

remoteWrite: []

250

## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#remote_read

251

252

remoteRead: []

253

## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tsdb

254

255

tsdb: {}

256

# out_of_order_time_window: 0s

257

258

## https://prometheus.io/docs/guides/opentelemetry

259

260

otlp: {}

261

# promote_resource_attributes: []

262

# keep_identifying_resource_attributes: false

263

# translation_strategy: NoUTF8EscapingWithSuffixes

264

265

## https://prometheus.io/docs/prometheus/latest/configuration/configuration/#exemplars

266

## Must be enabled via --enable-feature=exemplar-storage

267

268

exemplars: {}

269

# max_exemplars: 100000

270

271

## Custom HTTP headers for Liveness/Readiness/Startup Probe

272

273

## Useful for providing HTTP Basic Auth to healthchecks

274

probeHeaders: []

275

# - name: "Authorization"

276

# value: "Bearer ABCDEabcde12345"

277

278

## Additional Prometheus server container arguments

279

## Set to null for argumentless flags

280

281

extraArgs: {}

282

# web.enable-remote-write-receiver: null

283

284

## Additional InitContainers to initialize the pod

285

286

extraInitContainers: []

287

## Additional Prometheus server Volume mounts

288

289

extraVolumeMounts: []

290

## Additional Prometheus server Volumes

291

292

extraVolumes: []

293

## Additional Prometheus server hostPath mounts

294

295

extraHostPathMounts: []

296

# - name: certs-dir

297

# mountPath: /etc/kubernetes/certs

298

# subPath: ""

299

# hostPath: /etc/kubernetes/certs

300

# readOnly: true

301

302

extraConfigmapMounts: []

303

# - name: certs-configmap

304

# mountPath: /prometheus

305

# subPath: ""

306

# configMap: certs-configmap

307

# readOnly: true

308

309

## Additional Prometheus server Secret mounts

310

# Defines additional mounts with secrets. Secrets must be manually created in the namespace.

311

extraSecretMounts: []

312

# - name: secret-files

313

# mountPath: /etc/secrets

314

# subPath: ""

315

# secretName: prom-secret-files

316

# readOnly: true

317

318

## Prometheus server configuration from a secret

319

## Do not set both `configMapOverrideName` and `configFromSecret` simultaneously.

320

## Use either `configMapOverrideName` or `configFromSecret`.

321

## If `configFromSecret` is defined, a ConfigMap resource will NOT be generated.

322

configFromSecret: ""

323

## ConfigMap override where fullname is {{.Release.Name}}-{{.Values.server.configMapOverrideName}}

324

## Defining configMapOverrideName will cause templates/server-configmap.yaml

325

## to NOT generate a ConfigMap resource

326

327

configMapOverrideName: ""

328

## Extra labels for Prometheus server ConfigMap (ConfigMap that holds serverFiles)

329

extraConfigmapLabels: {}

330

## Override the prometheus.server.fullname for all objects related to the Prometheus server

331

fullnameOverride: ""

332

ingress:

333

## If true, Prometheus server Ingress will be created

334

335

enabled: false

336

ingressClassName: ""

337

## Prometheus server Ingress annotations

338

339

annotations: {}

340

# kubernetes.io/ingress.class: nginx

341

# kubernetes.io/tls-acme: 'true'

342

343

## Prometheus server Ingress additional labels

344

345

extraLabels: {}

346

## Redirect ingress to an additional defined port on the service

347

# servicePort: 8081

348

349

## Prometheus server Ingress hostnames with optional path (passed through tpl)

350

## Must be provided if Ingress is enabled

351

352

hosts: []

353

# - prometheus.domain.com

354

# - domain.com/prometheus

355

356

path: /

357

# pathType determines the interpretation of the path matching

358

pathType: Prefix

359

## Extra paths to prepend to every host configuration. This is useful when working with annotation based services. (passed through tpl)

360

extraPaths: []

361

# - path: /*

362

# backend:

363

# serviceName: ssl-redirect

364

# servicePort: use-annotation

365

366

## Prometheus server Ingress TLS configuration (hosts passed through tpl)

367

## Secrets must be manually created in the namespace

368

369

tls: []

370

# - secretName: prometheus-server-tls

371

# hosts:

372

# - prometheus.domain.com

373

## route (map) allows configuration of HTTPRoute resources

374

## Requires Gateway API resources and suitable controller installed within the cluster

375

## Ref. https://gateway-api.sigs.k8s.io/guides/http-routing/

376

route:

377

main:

378

## Enable this route

379

enabled: false

380

## ApiVersion set by default to "gateway.networking.k8s.io/v1"

381

apiVersion: ""

382

## kind set by default to HTTPRoute

383

kind: ""

384

## Annotations to attach to the HTTPRoute resource

385

annotations: {}

386

## Labels to attach to the HTTPRoute resource

387

labels: {}

388

## ParentRefs refers to resources this HTTPRoute is to be attached to (Gateways)

389

parentRefs: []

390

# - name: contour

391

# sectionName: http

392

393

## Hostnames (templated) defines a set of hostnames that should match against the HTTP Host

394

## header to select a HTTPRoute used to process the request

395

hostnames: []

396

# - my.example.com

397

398

## additionalRules (templated) allows adding custom rules to the route

399

additionalRules: []

400

## Filters define the filters that are applied to requests that match

401

## this rule

402

filters: []

403

## Matches define conditions used for matching the rule against incoming

404

## HTTP requests

405

matches:

406

- path:

407

type: PathPrefix

408

value: /

409

## httpsRedirect adds a filter for redirecting to https (HTTP 301 Moved Permanently).

410

## To redirect HTTP traffic to HTTPS, you need to have a Gateway with both HTTP and HTTPS listeners.

411

## Matches and filters do not take effect if enabled.

412

## Ref. https://gateway-api.sigs.k8s.io/guides/http-redirect-rewrite/

413

httpsRedirect: false

414

## Server Deployment Strategy type

415

strategy:

416

type: Recreate

417

## hostAliases allows adding entries to /etc/hosts inside the containers

418

hostAliases: []

419

# - ip: "127.0.0.1"

420

# hostnames:

421

# - "example.com"

422

423

## Node tolerations for server scheduling to nodes with taints

424

## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/

425

426

tolerations: []

427

# - key: "key"

428

# operator: "Equal|Exists"

429

# value: "value"

430

# effect: "NoSchedule|PreferNoSchedule|NoExecute(1.6 only)"

431

432

## Node labels for Prometheus server pod assignment

433

## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/

434

435

nodeSelector: {}

436

## Pod affinity

437

438

affinity: {}

439

## Pod anti-affinity can prevent the scheduler from placing Prometheus server replicas on the same node.

440

## The value "soft" means that the scheduler should *prefer* to not schedule two replica pods onto the same node but no guarantee is provided.

441

## The value "hard" means that the scheduler is *required* to not schedule two replica pods onto the same node.

442

## The default value "" will disable pod anti-affinity so that no anti-affinity rules will be configured (unless set in `server.affinity`).

443

444

podAntiAffinity: ""

445

## If anti-affinity is enabled sets the topologyKey to use for anti-affinity.

446

## This can be changed to, for example, failure-domain.beta.kubernetes.io/zone

447

448

podAntiAffinityTopologyKey: kubernetes.io/hostname

449

## Pod topology spread constraints

450

## ref. https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/

451

topologySpreadConstraints: []

452

## PodDisruptionBudget settings

453

## ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/

454

455

podDisruptionBudget:

456

enabled: false

457

# maxUnavailable: 1

458

# minAvailable: 1

459

## unhealthyPodEvictionPolicy is available since 1.27.0 (beta)

460

## https://kubernetes.io/docs/tasks/run-application/configure-pdb/#unhealthy-pod-eviction-policy

461

# unhealthyPodEvictionPolicy: IfHealthyBudget

462

## Use an alternate scheduler, e.g. "stork".

463

## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/

464

465

# schedulerName:

466

persistentVolume:

467

## If true, Prometheus server will create/use a Persistent Volume Claim

468

## If false, use emptyDir

469

470

enabled: true

471

## If set it will override the name of the created persistent volume claim

472

## generated by the stateful set.

473

474

statefulSetNameOverride: ""

475

## Prometheus server data Persistent Volume access modes

476

## Must match those of existing PV or dynamic provisioner

477

## Ref: http://kubernetes.io/docs/user-guide/persistent-volumes/

478

479

accessModes:

480

- ReadWriteOnce

481

## Prometheus server data Persistent Volume labels

482

483

labels: {}

484

## Prometheus server data Persistent Volume annotations

485

486

annotations: {}

487

## Prometheus server data Persistent Volume existing claim name

488

## Requires server.persistentVolume.enabled: true

489

## If defined, PVC must be created manually before volume will be bound

490

existingClaim: ""

491

## Prometheus server data Persistent Volume mount root path

492

493

mountPath: /data

494

## Prometheus server data Persistent Volume size

495

496

size: 8Gi

497

## Prometheus server data Persistent Volume Storage Class

498

## If defined, storageClassName: <storageClass>

499

## If set to "-", storageClassName: "", which disables dynamic provisioning

500

## If undefined (the default) or set to null, no storageClassName spec is

501

## set, choosing the default provisioner. (gp2 on AWS, standard on

502

## GKE, AWS & OpenStack)

503

504

# storageClass: "-"

505

506

## Subdirectory of Prometheus server data Persistent Volume to mount

507

## Useful if the volume's root directory is not empty

508

509

subPath: ""

510

## Persistent Volume Claim Selector

511

## Useful if Persistent Volumes have been provisioned in advance

512

## Ref: https://kubernetes.io/docs/concepts/storage/persistent-volumes/#selector

513

514

# selector:

515

# matchLabels:

516

# release: "stable"

517

# matchExpressions:

518

# - { key: environment, operator: In, values: [ dev ] }

519

520

## Persistent Volume Name

521

## Useful if Persistent Volumes have been provisioned in advance and you want to use a specific one

522

523

# volumeName: ""

524

emptyDir:

525

## Prometheus server emptyDir volume

526

## Configure size limit and medium

527

528

medium: ""

529

sizeLimit: ""

530

## Annotations to be added to Prometheus server pods

531

532

podAnnotations: {}

533

# iam.amazonaws.com/role: prometheus

534

535

## Labels to be added to Prometheus server pods

536

537

podLabels: {}

538

## Prometheus AlertManager configuration

539

540

alertmanagers: []

541

## Use a StatefulSet if replicaCount needs to be greater than 1 (see below)

542

543

replicaCount: 1

544

## Number of old history to retain to allow rollback

545

## Default Kubernetes value is set to 10

546

547

revisionHistoryLimit: 10

548

## Annotations to be added to ConfigMap

549

550

configMapAnnotations: {}

551

## Annotations to be added to deployment

552

553

deploymentAnnotations: {}

554

statefulSet:

555

## If true, use a statefulset instead of a deployment for pod management.

556

## This allows to scale replicas to more than 1 pod

557

558

enabled: false

559

annotations: {}

560

labels: {}

561

podManagementPolicy: OrderedReady

562

## Alertmanager headless service to use for the statefulset

563

564

headless:

565

annotations: {}

566

labels: {}

567

servicePort: 80

568

## Enable gRPC port on service to allow auto discovery with thanos-querier

569

gRPC:

570

enabled: false

571

servicePort: 10901

572

# nodePort: 10901

573

## Statefulset's persistent volume claim retention policy

574

## pvcDeleteOnStsDelete and pvcDeleteOnStsScale determine whether

575

## statefulset's PVCs are deleted (true) or retained (false) on scaling down

576

## and deleting statefulset, respectively. Requires 1.27.0+.

577

## Ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#persistentvolumeclaim-retention

578

579

pvcDeleteOnStsDelete: false

580

pvcDeleteOnStsScale: false

581

daemonSet:

582

## If true, use a daemonset instead of a deployment for pod management.

583

## This allows to run prometheus agent on every node in the cluster.

584

585

enabled: false

586

annotations: {}

587

labels: {}

588

## Prometheus server readiness and liveness probe initial delay and timeout

589

## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/

590

591

tcpSocketProbeEnabled: false

592

probeScheme: HTTP

593

readinessProbeInitialDelay: 30

594

readinessProbePeriodSeconds: 5

595

readinessProbeTimeout: 4

596

readinessProbeFailureThreshold: 3

597

readinessProbeSuccessThreshold: 1

598

livenessProbeInitialDelay: 30

599

livenessProbePeriodSeconds: 15

600

livenessProbeTimeout: 10

601

livenessProbeFailureThreshold: 3

602

livenessProbeSuccessThreshold: 1

603

startupProbe:

604

enabled: false

605

periodSeconds: 5

606

failureThreshold: 30

607

timeoutSeconds: 10

608

## Prometheus server resource requests and limits

609

## Ref: http://kubernetes.io/docs/user-guide/compute-resources/

610

611

resources: {}

612

# limits:

613

# cpu: 500m

614

# memory: 512Mi

615

# requests:

616

# cpu: 500m

617

# memory: 512Mi

618

619

# Required for use in managed kubernetes clusters (such as AWS EKS) with custom CNI (such as calico),

620

# because control-plane managed by AWS cannot communicate with pods' IP CIDR and admission webhooks are not working

621

622

hostNetwork: false

623

# When hostNetwork is enabled, this will set to ClusterFirstWithHostNet automatically

624

dnsPolicy: ClusterFirst

625

# Use hostPort

626

# hostPort: 9090

627

628

# Use portName

629

portName: ""

630

## Vertical Pod Autoscaler config

631

## Ref: https://github.com/kubernetes/autoscaler/tree/master/vertical-pod-autoscaler

632

verticalAutoscaler:

633

## If true a VPA object will be created for the controller (either StatefulSet or Deployemnt, based on above configs)

634

enabled: false

635

# updateMode: "Auto"

636

# containerPolicies:

637

# - containerName: 'prometheus-server'

638

# Custom DNS configuration to be added to prometheus server pods

639

dnsConfig: {}

640

# nameservers:

641

# - 1.2.3.4

642

# searches:

643

# - ns1.svc.cluster-domain.example

644

# - my.dns.search.suffix

645

# options:

646

# - name: ndots

647

# value: "2"

648

# - name: edns0

649

650

## Security context to be added to server pods

651

652

securityContext:

653

runAsUser: 65534

654

runAsNonRoot: true

655

runAsGroup: 65534

656

fsGroup: 65534

657

## Security context to be added to server container

658

659

containerSecurityContext: {}

660

service:

661

## If false, no Service will be created for the Prometheus server

662

663

enabled: true

664

annotations: {}

665

labels: {}

666

clusterIP: ""

667

## List of IP addresses at which the Prometheus server service is available

668

## Ref: https://kubernetes.io/docs/concepts/services-networking/service/#external-ips

669

670

externalIPs: []

671

loadBalancerIP: ""

672

loadBalancerSourceRanges: []

673

loadBalancerClass: ""

674

servicePort: 80

675

sessionAffinity: None

676

type: ClusterIP

677

## externalTrafficPolicy is applicable to service with externally-facing addresses (NodePorts, ExternalIPs, and LoadBalancer IPs)

678

externalTrafficPolicy: ""

679

## Enable gRPC port on service to allow auto discovery with thanos-querier

680

gRPC:

681

enabled: false

682

servicePort: 10901

683

# nodePort: 10901

684

## If using a statefulSet (statefulSet.enabled=true), configure the

685

## service to connect to a specific replica to have a consistent view

686

## of the data.

687

statefulsetReplica:

688

enabled: false

689

replica: 0

690

## Additional port to define in the Service

691

additionalPorts: []

692

# additionalPorts:

693

# - name: authenticated

694

# port: 8081

695

# targetPort: 8081

696

## Prometheus server pod termination grace period

697

698

terminationGracePeriodSeconds: 300

699

## Prometheus data retention period (default if not specified is 15 days)

700

701

retention: "15d"

702

## Prometheus' data retention size. Supported units: B, KB, MB, GB, TB, PB, EB.

703

704

retentionSize: ""

705

## scrapeConfigs (map) defines Prometheus' default scrape_configs.

706

## Each can be disabled by setting "enabled" to "false" or leaving it empty. The key sets the default "job_name".

707

## Further scrapeConfigs can be added as new keys, these are then enabled by default.

708

## `pre_relabel_configs` and `post_relabel_configs` accept templated YAML block-scalar strings.

709

## Their rendered rules are inserted before and after the chart-managed `relabel_configs`, respectively.

710

## ref. https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config

711

# @schema additionalProperties: {type: object, properties: {pre_relabel_configs: {type: string}, post_relabel_configs: {type: string}}}

712

scrapeConfigs:

713

prometheus:

714

enabled: true

715

job_name: ""

716

static_configs:

717

- targets:

718

- localhost:9090

719

kubernetes-api-servers:

720

enabled: true

721

job_name: ""

722

kubernetes_sd_configs:

723

- role: endpointslice

724

scheme: https

725

tls_config:

726

ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt

727

bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

728

relabel_configs:

729

- source_labels:

730

- __meta_kubernetes_namespace

731

- __meta_kubernetes_service_name

732

- __meta_kubernetes_endpointslice_port_name

733

action: keep

734

regex: default;kubernetes;https

735

pre_relabel_configs: ""

736

post_relabel_configs: ""

737

kubernetes-nodes:

738

enabled: true

739

job_name: ""

740

scheme: https

741

tls_config:

742

ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt

743

insecure_skip_verify: true

744

bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

745

kubernetes_sd_configs:

746

- role: node

747

relabel_configs:

748

- action: labelmap

749

regex: __meta_kubernetes_node_label_(.+)

750

pre_relabel_configs: ""

751

post_relabel_configs: ""

752

kubernetes-nodes-cadvisor:

753

enabled: true

754

job_name: ""

755

scheme: https

756

tls_config:

757

ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt

758

insecure_skip_verify: true

759

bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

760

metrics_path: /metrics/cadvisor

761

kubernetes_sd_configs:

762

- role: node

763

relabel_configs:

764

- action: labelmap

765

regex: __meta_kubernetes_node_label_(.+)

766

- source_labels: [__metrics_path__]

767

target_label: metrics_path

768

pre_relabel_configs: ""

769

post_relabel_configs: ""

770

kubernetes-service-endpoints:

771

enabled: true

772

job_name: ""

773

honor_labels: true

774

kubernetes_sd_configs:

775

- role: endpointslice

776

relabel_configs:

777

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape]

778

action: keep

779

regex: true

780

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape_slow]

781

action: drop

782

regex: true

783

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scheme]

784

action: replace

785

target_label: __scheme__

786

regex: (https?)

787

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_path]

788

action: replace

789

target_label: __metrics_path__

790

regex: (.+)

791

- source_labels:

792

- __address__

793

- __meta_kubernetes_service_annotation_prometheus_io_port

794

action: replace

795

target_label: __address__

796

regex: (.+?)(?::\d+)?;(\d+)

797

replacement: $1:$2

798

- action: labelmap

799

regex: __meta_kubernetes_service_annotation_prometheus_io_param_(.+)

800

replacement: __param_$1

801

- action: labelmap

802

regex: __meta_kubernetes_service_label_(.+)

803

- source_labels: [__meta_kubernetes_namespace]

804

action: replace

805

target_label: namespace

806

- source_labels: [__meta_kubernetes_service_name]

807

action: replace

808

target_label: service

809

- source_labels: [__meta_kubernetes_pod_node_name]

810

action: replace

811

target_label: node

812

pre_relabel_configs: ""

813

post_relabel_configs: ""

814

kubernetes-service-endpoints-slow:

815

enabled: true

816

job_name: ""

817

honor_labels: true

818

scrape_interval: 5m

819

scrape_timeout: 30s

820

kubernetes_sd_configs:

821

- role: endpointslice

822

relabel_configs:

823

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape_slow]

824

action: keep

825

regex: true

826

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scheme]

827

action: replace

828

target_label: __scheme__

829

regex: (https?)

830

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_path]

831

action: replace

832

target_label: __metrics_path__

833

regex: (.+)

834

- source_labels:

835

- __address__

836

- __meta_kubernetes_service_annotation_prometheus_io_port

837

action: replace

838

target_label: __address__

839

regex: (.+?)(?::\d+)?;(\d+)

840

replacement: $1:$2

841

- action: labelmap

842

regex: __meta_kubernetes_service_annotation_prometheus_io_param_(.+)

843

replacement: __param_$1

844

- action: labelmap

845

regex: __meta_kubernetes_service_label_(.+)

846

- source_labels: [__meta_kubernetes_namespace]

847

action: replace

848

target_label: namespace

849

- source_labels: [__meta_kubernetes_service_name]

850

action: replace

851

target_label: service

852

- source_labels: [__meta_kubernetes_pod_node_name]

853

action: replace

854

target_label: node

855

prometheus-pushgateway:

856

enabled: true

857

job_name: ""

858

honor_labels: true

859

kubernetes_sd_configs:

860

- role: service

861

relabel_configs:

862

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_probe]

863

action: keep

864

regex: pushgateway

865

pre_relabel_configs: ""

866

post_relabel_configs: ""

867

kubernetes-services:

868

enabled: true

869

job_name: ""

870

honor_labels: true

871

metrics_path: /probe

872

params:

873

module: [http_2xx]

874

kubernetes_sd_configs:

875

- role: service

876

relabel_configs:

877

- source_labels: [__meta_kubernetes_service_annotation_prometheus_io_probe]

878

action: keep

879

regex: true

880

- source_labels: [__address__]

881

target_label: __param_target

882

- target_label: __address__

883

replacement: blackbox

884

- source_labels: [__param_target]

885

target_label: instance

886

- action: labelmap

887

regex: __meta_kubernetes_service_label_(.+)

888

- source_labels: [__meta_kubernetes_namespace]

889

target_label: namespace

890

- source_labels: [__meta_kubernetes_service_name]

891

target_label: service

892

pre_relabel_configs: ""

893

post_relabel_configs: ""

894

kubernetes-pods:

895

enabled: true

896

job_name: ""

897

honor_labels: true

898

kubernetes_sd_configs:

899

- role: pod

900

relabel_configs:

901

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]

902

action: keep

903

regex: true

904

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape_slow]

905

action: drop

906

regex: true

907

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scheme]

908

action: replace

909

regex: (https?)

910

target_label: __scheme__

911

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]

912

action: replace

913

target_label: __metrics_path__

914

regex: (.+)

915

- source_labels:

916

- __meta_kubernetes_pod_annotation_prometheus_io_port

917

- __meta_kubernetes_pod_ip

918

action: replace

919

regex: (\d+);(([A-Fa-f0-9]{1,4}::?){1,7}[A-Fa-f0-9]{1,4})

920

replacement: '[$2]:$1'

921

target_label: __address__

922

- source_labels:

923

- __meta_kubernetes_pod_annotation_prometheus_io_port

924

- __meta_kubernetes_pod_ip

925

action: replace

926

regex: (\d+);((([0-9]+?)(\.|$)){4})

927

replacement: $2:$1

928

target_label: __address__

929

- action: labelmap

930

regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+)

931

replacement: __param_$1

932

- action: labelmap

933

regex: __meta_kubernetes_pod_label_(.+)

934

- source_labels: [__meta_kubernetes_namespace]

935

action: replace

936

target_label: namespace

937

- source_labels: [__meta_kubernetes_pod_name]

938

action: replace

939

target_label: pod

940

- source_labels: [__meta_kubernetes_pod_phase]

941

regex: Pending|Succeeded|Failed|Completed

942

action: drop

943

- source_labels: [__meta_kubernetes_pod_node_name]

944

action: replace

945

target_label: node

946

pre_relabel_configs: ""

947

post_relabel_configs: ""

948

kubernetes-pods-slow:

949

enabled: true

950

job_name: ""

951

honor_labels: true

952

scrape_interval: 5m

953

scrape_timeout: 30s

954

kubernetes_sd_configs:

955

- role: pod

956

relabel_configs:

957

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape_slow]

958

action: keep

959

regex: true

960

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scheme]

961

action: replace

962

regex: (https?)

963

target_label: __scheme__

964

- source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]

965

action: replace

966

target_label: __metrics_path__

967

regex: (.+)

968

- source_labels:

969

- __meta_kubernetes_pod_annotation_prometheus_io_port

970

- __meta_kubernetes_pod_ip

971

action: replace

972

regex: (\d+);(([A-Fa-f0-9]{1,4}::?){1,7}[A-Fa-f0-9]{1,4})

973

replacement: '[$2]:$1'

974

target_label: __address__

975

- source_labels:

976

- __meta_kubernetes_pod_annotation_prometheus_io_port

977

- __meta_kubernetes_pod_ip

978

action: replace

979

regex: (\d+);((([0-9]+?)(\.|$)){4})

980

replacement: $2:$1

981

target_label: __address__

982

- action: labelmap

983

regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+)

984

replacement: __param_$1

985

- action: labelmap

986

regex: __meta_kubernetes_pod_label_(.+)

987

- source_labels: [__meta_kubernetes_namespace]

988

action: replace

989

target_label: namespace

990

- source_labels: [__meta_kubernetes_pod_name]

991

action: replace

992

target_label: pod

993

- source_labels: [__meta_kubernetes_pod_phase]

994

regex: Pending|Succeeded|Failed|Completed

995

action: drop

996

- source_labels: [__meta_kubernetes_pod_node_name]

997

action: replace

998

target_label: node

999

pre_relabel_configs: ""

1000

post_relabel_configs: ""

1001

# extraScrapeConfigs adds additional scrape configs to prometheus.yml

1002

# must be a string so you have to add a | after extraScrapeConfigs:

1003

# example adds prometheus-blackbox-exporter scrape config

1004

extraScrapeConfigs: ""

1005

# - job_name: 'prometheus-blackbox-exporter'

1006

# metrics_path: /probe

1007

# params:

1008

# module: [http_2xx]

1009

# static_configs:

1010

# - targets:

1011

# - https://example.com

1012

# relabel_configs:

1013

# - source_labels: [__address__]

1014

# target_label: __param_target

1015

# - source_labels: [__param_target]

1016

# target_label: instance

1017

# - target_label: __address__

1018

# replacement: prometheus-blackbox-exporter:9115

1019

1020

## Prometheus server ConfigMap entries for rule files (allow prometheus labels interpolation)

1021

ruleFiles: {}

1022

## Prometheus server ConfigMap entries for scrape_config_files

1023

## (allows scrape configs defined in additional files)

1024

1025

scrapeConfigFiles: []

1026

## Prometheus server ConfigMap entries

1027

1028

serverFiles:

1029

## Alerts configuration

1030

## Ref: https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/

1031

alerting_rules.yml: {}

1032

# groups:

1033

# - name: Instances

1034

# rules:

1035

# - alert: InstanceDown

1036

# expr: up == 0

1037

# for: 5m

1038

# labels:

1039

# severity: page

1040

# annotations:

1041

# description: '{{ $labels.instance }} of job {{ $labels.job }} has been down for more than 5 minutes.'

1042

# summary: 'Instance {{ $labels.instance }} down'

1043

## DEPRECATED DEFAULT VALUE, unless explicitly naming your files, please use alerting_rules.yml

1044

alerts: {}

1045

## Records configuration

1046

## Ref: https://prometheus.io/docs/prometheus/latest/configuration/recording_rules/

1047

recording_rules.yml: {}

1048

## DEPRECATED DEFAULT VALUE, unless explicitly naming your files, please use recording_rules.yml

1049

rules: {}

1050

prometheus.yml:

1051

rule_files:

1052

- /etc/config/recording_rules.yml

1053

- /etc/config/alerting_rules.yml

1054

## Below two files are DEPRECATED will be removed from this default values file

1055

- /etc/config/rules

1056

- /etc/config/alerts

1057

# Adds option to add alert_relabel_configs to avoid duplicate alerts in alertmanager

1058

# useful in H/A prometheus with different external labels but the same alerts

1059

alertRelabelConfigs: {}

1060

# alert_relabel_configs:

1061

# - source_labels: [dc]

1062

# regex: (.+)\d+

1063

# target_label: dc

1064

1065

networkPolicy:

1066

## Enable creation of NetworkPolicy resources.

1067

1068

enabled: false

1069

# Force namespace of namespaced resources

1070

forceNamespace: ""

1071

# Extra manifests to deploy as an array

1072

extraManifests: []

1073

# - |

1074

# apiVersion: v1

1075

# kind: ConfigMap

1076

# metadata:

1077

# labels:

1078

# name: prometheus-extra

1079

# data:

1080

# extra-data: "value"

1081

1082

# Configuration of subcharts defined in Chart.yaml

1083

1084

## alertmanager sub-chart configurable values

1085

## Please see https://github.com/prometheus-community/helm-charts/tree/main/charts/alertmanager

1086

1087

alertmanager:

1088

## If false, alertmanager will not be installed

1089

1090

enabled: true

1091

persistence:

1092

## If true, storage will create or use Persistence Volume

1093

## If false, storage will use emptyDir

1094

1095

enabled: true

1096

## Custom annotations for the PVC created by the alertmanager StatefulSet.

1097

## Useful for configuring storage provider options such as disk type, KMS encryption keys, or custom volume name prefixes.

1098

annotations: {}

1099

## Custom labels for the PVC created by the alertmanager StatefulSet.

1100

## Useful for selecting, grouping, and organizing so that they can be queried or targeted in deployments, policies, etc.

1101

labels: {}

1102

## Persistent Volume Storage Class

1103

## If defined, storageClassName: <storageClass>

1104

## If set to "-", storageClassName: "", which disables dynamic provisioning

1105

## If undefined (the default) or set to null, no storageClassName spec is

1106

## set, choosing the default provisioner.

1107

1108

# storageClass: "-"

1109

accessModes:

1110

- ReadWriteOnce

1111

size: 2Gi

1112

## Configure emptyDir volume

1113

1114

emptyDir: {}

1115

podSecurityContext:

1116

runAsUser: 65534

1117

runAsNonRoot: true

1118

runAsGroup: 65534

1119

fsGroup: 65534

1120

## kube-state-metrics sub-chart configurable values

1121

## Please see https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics

1122

1123

kube-state-metrics:

1124

## If false, kube-state-metrics sub-chart will not be installed

1125

1126

enabled: true

1127

## prometheus-node-exporter sub-chart configurable values

1128

## Please see https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter

1129

1130

prometheus-node-exporter:

1131

## If false, node-exporter will not be installed

1132

1133

enabled: true

1134

rbac:

1135

pspEnabled: false

1136

containerSecurityContext:

1137

allowPrivilegeEscalation: false

1138

## prometheus-pushgateway sub-chart configurable values

1139

## Please see https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-pushgateway

1140

1141

prometheus-pushgateway:

1142

## If false, pushgateway will not be installed

1143

1144

enabled: true

1145

# Optional service annotations

1146

serviceAnnotations:

1147

prometheus.io/probe: pushgateway

1148

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

prometheus

The trusted source for open source

Product

Solutions

Customers

Resources

Company