home-stack-kustomize/kustomize/bases/prometheus/prometheus.yaml

apiVersion: monitoring.coreos.com/v1
kind: Prometheus
metadata:
  name: prometheus
spec:
  serviceAccountName: prometheus
  retention: 30d
  retentionSize: 9GB
  ruleSelector:
    matchLabels:
      monitor: prometheus
  serviceMonitorSelector:
    matchLabels:
      monitor: prometheus
  podMonitorSelector:
    matchLabels:
      monitor: prometheus
  probeSelector:
    matchLabels:
      monitor: prometheus
  # remoteWrite:
  #   - url: changeme
  #     basicAuth:
  #       username:
  #         name: grafana-cloud-credentials
  #         key: username
  #       password:
  #         name: grafana-cloud-credentials
  #         key: password
  securityContext:
    runAsGroup: 65534
    runAsNonRoot: true
    runAsUser: 65534
    fsGroup: 65534
  resources:
    requests:
      cpu: 1000m
      memory: 1Gi
    limits:
      cpu: 1000m
      memory: 1Gi
  storage:
    volumeClaimTemplate:
      spec:
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
            storage: 10Gi