Files
yucca-o11y/kubernetes/apps/base/victoria-metrics-users/app/vmauth-self-select.yaml
T

31 lines
1.1 KiB
YAML

---
# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/operator.victoriametrics.com/vmauth_v1beta1.json
apiVersion: operator.victoriametrics.com/v1beta1
kind: VMAuth
metadata:
name: self-select
spec:
# In-cluster only: backs Grafana's default datasource. Only this cluster's
# own tenant path is routed, so nothing that queries through here can reach
# another tenant. Cross-cluster reads go through the explicit VictoriaMetrics
# Fleet datasource instead.
port: "8427"
replicaCount: 2
podDisruptionBudget:
minAvailable: 1
topologySpreadConstraints:
- maxSkew: 1
topologyKey: kubernetes.io/hostname
whenUnsatisfiable: ScheduleAnyway
labelSelector:
matchLabels:
app.kubernetes.io/name: vmauth
app.kubernetes.io/instance: self-select
selectAllByDefault: false
unauthorizedUserAccessSpec:
targetRefs:
- static:
url: http://vmselect-victoria-metrics.o11y.svc.cluster.local:8481
paths:
- /select/${CLUSTER_VMETRICS_ACCOUNT_ID}:${CLUSTER_VMETRICS_PROJECT_ID}/.*