Parameters

The parent key for all of the following parameters is openshift_prometheus_proxy.

namespace

type

string

default

appuio-prometheus-proxy

The namespace in which to deploy this component.

template_parameters

type

dict

default
OPENSHIFT_PROMETHEUS_PROXY_UPSTREAM: https://prometheus-k8s.openshift-monitoring.svc:9091
OPENSHIFT_PROMETHEUS_PROXY_TLS_VERIFY: "service"
OPENSHIFT_PROMETHEUS_PROXY_HOSTNAME: openshift-prometheus-proxy.example.com
OPENSHIFT_PROMETHEUS_PROXY_SESSION_SECRET: ?{vaultkv:${cluster:tenant}/${cluster:name}/openshift-prometheus-proxy/session-secret}

Parameters used to render the OpenShift template provided as part of OpenShift Prometheus Proxy

route_enabled

type

boolean

default

false

Whether to generate an OpenShift route object for the proxy.

version

This parameter specifies which version of the upstream repository (as a Git tree-ish) to use when rendering the component.

access

Configure client access to the proxy. See Grant a client access to the proxy for a more detailed guide on access configuration.

access.use_networkpolicy

type

boolean

default

true

If this parameter is true, configure network access to the proxy namespace with a network policy. That network policy allows access to the proxy namespace from all namespaces labelled with appuio.ch/prometheus-proxy=allowed.

If this parameter is false, configure network access to the proxy namespace by setting its network ID to 0. This option is provided to support OpenShift 3.11 clusters which use the multitenant network plugin.

access.service_account_refs

type

array

default

[]

The contents of this array are used to create RBAC rules to allow client service accounts access to the Prometheus proxy.

The format of each array entry must be

namespace: cust-namespace
name: service-account-name

Example

openshift_prometheus_proxy:
  namespace: example-namespace
  template_parameters:
    OPENSHIFT_PROMETHEUS_PROXY_HOSTNAME: my-awesome-prometheus-proxy.example.org
  route_enabled: true
  access:
    service_account_refs:
      - namespace: cust-monitoring
        name: prometheus