---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: thanos
  namespace: monitoring
spec:
  interval: 15m
  chart:
    spec:
      chart: thanos
      version: 11.6.5
      sourceRef:
        kind: HelmRepository
        name: bitnami
        namespace: flux-system
  install:
    createNamespace: true
    remediation:
      retries: 5
  upgrade:
    remediation:
      retries: 5
  values:
    image:
      registry: quay.io
      repository: thanos/thanos
      tag: v0.29.0
    objstoreConfig:
      type: s3
    query:
      enabled: true
      replicaCount: 2
      podAntiAffinityPreset: hard
      replicaLabels:
        - replica
      dnsDiscovery:
        sidecarsService: kube-prometheus-stack-thanos-discovery
        sidecarsNamespace: monitoring
        stores:
          - "dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery"
          - "thanos-store.${SECRET_DOMAIN}:443"
      ingress:
        enabled: true
        hostname: &host "thanos-query.${SECRET_CLUSTER_DOMAIN}"
        annotations:
          auth.home.arpa/enabled: "true"
        ingressClassName: "nginx"
        tls: true
        extraTls:
          - hosts:
              - *host
      resources:
        requests:
          cpu: 15m
          memory: 64M
        limits:
          memory: 99M
    queryFrontend:
      enabled: true
    bucketweb:
      enabled: true
      refresh: "10m"
    compactor:
      enabled: true
      extraFlags:
        - "--compact.concurrency"
        - "4"
      retentionResolutionRaw: 14d
      retentionResolution5m: 14d
      retentionResolution1h: 30d
      ingress:
        enabled: true
        hostname: &host "thanos-compactor.${SECRET_CLUSTER_DOMAIN}"
        ingressClassName: "nginx"
        tls: true
        extraTls:
          - hosts:
              - *host
      persistence:
        enabled: true
        storageClass: "rook-ceph-block"
        size: 15Gi
    storegateway:
      enabled: true
      resources:
        requests:
          cpu: 23m
          memory: 204M
        limits:
          memory: 226M
      persistence:
        enabled: true
        storageClass: "rook-ceph-block"
        size: 512Mi
    ruler:
      enabled: false
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true
  valuesFrom:
    - kind: Secret
      name: thanos
      valuesKey: S3_BUCKET_NAME
      targetPath: objstoreConfig.config.bucket
    - kind: Secret
      name: thanos
      valuesKey: S3_BUCKET_HOST
      targetPath: objstoreConfig.config.endpoint
    - kind: Secret
      name: thanos
      valuesKey: S3_BUCKET_REGION
      targetPath: objstoreConfig.config.region
    - kind: Secret
      name: thanos
      valuesKey: S3_ACCESS_KEY
      targetPath: objstoreConfig.config.access_key
    - kind: Secret
      name: thanos
      valuesKey: S3_SECRET_KEY
      targetPath: objstoreConfig.config.secret_key