---
hiera_include:
  - vmcluster::vmagent

vmcluster::vmagent::enable: true
vmcluster::vmagent::static_targets:
  vyos_node:
    targets:
      - '198.18.21.160:9100'
    scrape_interval: '15s'
    metrics_path: '/metrics'
    scheme: 'http'
    labels:
      instance: 'syrtvm0001.main.unkin.net'
      job: 'vyos_node'
vmcluster::vmagent::options:
  tls: 'true'
  tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
  tlsKeyFile: '/etc/pki/tls/vault/private.key'
  tlsMinVersion: 'TLS12'
  remoteWrite.url:
    - https://vminsert.service.consul:8480/insert/0/prometheus

  remoteWrite.tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
  remoteWrite.tlsKeyFile: '/etc/pki/tls/vault/private.key'
  remoteWrite.tlsCAFile: '/etc/pki/tls/certs/ca-bundle.crt'
  promscrape.config: '/etc/vmagent/scrape.yaml'
  memory.allowedBytes: '1GiB'
  envflag.enable: 'true'

# additional altnames
profiles::pki::vault::alt_names:
  - vmagent.main.unkin.net
  - vmagent.service.consul
  - vmagent.query.consul
  - "vmagent.service.%{facts.country}-%{facts.region}.consul"

consul::services:
  vmagent:
    service_name: 'vmagent'
    tags:
      - 'metrics'
      - 'metrics_scheme=https'
      - 'metrics_job=vmagent'
    address: "%{facts.networking.ip}"
    port: 8429
    checks:
      - id: 'vmagent_http_check'
        name: 'vmagent HTTP Check'
        http: "https://%{facts.networking.fqdn}:8429/health"
        method: 'GET'
        tls_skip_verify: true
        interval: '10s'
        timeout: '1s'
profiles::consul::client::node_rules:
  - resource: service
    segment: vmagent
    disposition: write
  - resource: agent_prefix
    segment: ''
    disposition: read
  - resource: node_prefix
    segment: ''
    disposition: read
  - resource: service_prefix
    segment: ''
    disposition: read