---
hiera_include:
  - vmcluster::vmselect

vmcluster::vmselect::enable: true
vmcluster::vmselect::data_path: /data/vmselect-cache
vmcluster::vmselect::options:
  search.skipSlowReplicas: 'true'
  search.denyPartialResponse: 'false'
  replicationFactor: '2'
  globalReplicationFactor: '2'
  tls: 'true'
  tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
  tlsKeyFile: '/etc/pki/tls/vault/private.key'
  tlsMinVersion: 'TLS12'
  memory.allowedBytes: '1GiB'
  metrics.exposeMetadata: 'true'
  envflag.enable: 'true'
  storageNode:
    - ausyd1nxvm2086.main.unkin.net:8401
    - ausyd1nxvm2087.main.unkin.net:8401
    - ausyd1nxvm2088.main.unkin.net:8401
    - ausyd1nxvm2089.main.unkin.net:8401
    - ausyd1nxvm2090.main.unkin.net:8401

# additional altnames
profiles::pki::vault::alt_names:
  - vmselect.main.unkin.net
  - vmselect.service.consul
  - vmselect.query.consul
  - "vmselect.service.%{facts.country}-%{facts.region}.consul"

consul::services:
  vmselect:
    service_name: 'vmselect'
    tags:
      - 'metrics'
      - 'metrics_scheme=https'
      - 'metrics_job=vmselect'
    address: "%{facts.networking.ip}"
    port: 8481
    checks:
      - id: 'vmselect_http_check'
        name: 'vmselect HTTP Check'
        http: "https://%{facts.networking.fqdn}:8481/health"
        method: 'GET'
        tls_skip_verify: true
        interval: '10s'
        timeout: '1s'
profiles::consul::client::node_rules:
  - resource: service
    segment: vmselect
    disposition: write