apiVersion: core.observatorium.io/v1alpha1
kind: Observatorium
metadata:
  labels:
    app.kubernetes.io/instance: observatorium-xyz
    app.kubernetes.io/name: observatorium-cr
    app.kubernetes.io/part-of: observatorium
  name: observatorium-xyz
spec:
  api:
    image: quay.io/observatorium/observatorium:master-2020-09-08-v0.1.1-142-g61a908f
    rbac:
      roleBindings:
      - name: test
        roles:
        - read-write
        subjects:
        - kind: user
          name: admin@example.com
      roles:
      - name: read-write
        permissions:
        - read
        - write
        resources:
        - logs
        - metrics
        tenants:
        - test
    tenants:
    - id: 1610b0c3-c509-4592-a256-a1871353dbfa
      name: test
      oidc:
        clientID: test
        clientSecret: ZXhhbXBsZS1hcHAtc2VjcmV0
        issuerURL: http://dex.dex.svc.cluster.local:5556/dex
        usernameClaim: email
    tls:
      caKey: ca.pem
      certKey: cert.pem
      configMapName: observatorium-xyz-tls
      keyKey: key.pem
      secretName: observatorium-xyz-tls
      serverName: observatorium-xyz-observatorium-api.observatorium.svc.cluster.local
    version: master-2020-09-08-v0.1.1-142-g61a908f
  apiQuery:
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    version: master-2020-08-12-70f89d83
  compact:
    enableDownsampling: false
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    retentionResolution1h: 1s
    retentionResolution5m: 1s
    retentionResolutionRaw: 14d
    version: master-2020-08-12-70f89d83
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 50Gi
  hashrings:
  - hashring: default
    tenants: []
  loki:
    image: docker.io/grafana/loki:1.6.1
    replicas:
      distributor: 1
      ingester: 1
      querier: 1
      query_frontend: 1
      table_manager: 1
    version: 1.6.1
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 250Mi
  objectStorageConfig:
    loki:
      accessKeyIdKey: aws_access_key_id
      bucketsKey: buckets
      endpointKey: endpoint
      regionKey: region
      secretAccessKeyKey: aws_secret_access_key
      secretName: loki-objectstorage
    thanos:
      key: thanos.yaml
      name: thanos-objectstorage
  query:
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    version: master-2020-08-12-70f89d83
  queryFrontend:
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    version: master-2020-08-12-70f89d83
  receivers:
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    version: master-2020-08-12-70f89d83
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 50Gi
  rule:
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    version: master-2020-08-12-70f89d83
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 50Gi
  store:
    cache:
      exporterImage: prom/memcached-exporter:v0.6.0
      exporterVersion: v0.6.0
      image: docker.io/memcached:1.6.3-alpine
      memoryLimitMb: 1024
      replicas: 1
      version: 1.6.3-alpine
    image: quay.io/thanos/thanos:master-2020-08-12-70f89d83
    shards: 1
    version: master-2020-08-12-70f89d83
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 50Gi
  thanosReceiveController:
    image: quay.io/observatorium/thanos-receive-controller:master-2020-02-06-b66e0c8
    version: master-2020-02-06-b66e0c8
