apiVersion: operator.victoriametrics.com/v1beta1
kind: VMAgent
metadata:
  name: "{{ .Name }}"
  namespace: "{{ .Namespace }}"
spec:
  scrapeInterval: 15s
  image:
    repository: "{{ .ImageRepo }}"
    tag: "{{ .ImageTag }}"
  remoteWrite:
  - url: "{{ .RemoteWriteURL }}"
  priorityClassName: "{{ .PriorityClassName }}"
  externalLabels:
    sharedpool_id: "{{ .SharedPoolID }}"
  podScrapeSelector:
    matchLabels:
      scrape-by: "{{ .LabelScrapeBy }}"
  persistentVolumeClaimRetentionPolicy:
    whenDeleted: Delete
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    runAsGroup: 2000
    fsGroup: 2000
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false
    privileged: false
    capabilities:
      drop:
      - NET_RAW