# Vector EDGE agent (DaemonSet) — thin publisher. Tails every node's pod logs
# (incl. control-plane via the blanket toleration) and publishes them into
# JetStream over the Vector NATS sink. No parsing; only a routing subject token
# is attached. Shaping happens in the transform tier after JetStream.
role: Agent
fullnameOverride: vector-agent

# Pulled through the artifactapi dockerhub remote; distroless-libc (no DHI —
# subscription-gated/private-namespace, not reachable via the anon proxy).
image:
  repository: artifactapi.k8s.syd1.au.unkin.net/dockerhub/timberio/vector
  tag: 0.57.0-distroless-libc

rbac:
  create: true
serviceAccount:
  create: true

podLabels:
  vector.dev/exclude: "true"

tolerations:
  - operator: Exists

env:
  # Vector 0.57 disables ${VAR} config interpolation by default; auth needs it.
  - name: VECTOR_DANGEROUSLY_ALLOW_ENV_VAR_INTERPOLATION
    value: "true"
  - name: NATS_PRODUCER_PASSWORD
    valueFrom:
      secretKeyRef:
        name: nats-auth
        key: producer_password

resources:
  requests:
    cpu: 100m
    memory: 256Mi
  limits:
    cpu: "1"
    memory: 1Gi

service:
  enabled: false

# Pipeline is the single source of truth in apps/base/logging/vector/agent.yaml,
# mounted via existingConfigMaps (avoids the chart's customConfig Helm-tpl pass).
dataDir: /vector-data-dir
existingConfigMaps:
  - vector-agent-config

workloadResourceAnnotations:
  configmap.reloader.stakater.com/auto: "true"