- templateId: k8s-infra-template-v1 # template version string
  default: true
  supportedVersions:
    - "1.24"
    - "1.25"
    - "1.26"
    - "1.27"
    - "1.28"
    - "1.29"
    - "1.30"
  kubeStateMetrics:
    chartPath: /etc/helm/kube-state-metrics/kube-state-metrics.tgz
    releaseName: kube-state-metrics
    namespace: monitoring
    helmValues:
      image:
        registry: registry.k8s.io
        repository: kube-state-metrics/kube-state-metrics
        tag: v2.10.0
      resources:
        limits:
          cpu: 200m
          memory: 500Mi
        requests:
          cpu: 100m
          memory: 250Mi
      extraArgs:
        - "--metric-labels-allowlist=nodes=[*]" # Add node labels to metrics labels.
  nodeExporter:
    chartPath: /etc/helm/node-exporter/node-exporter.tgz
    releaseName: node-exporter
    namespace: monitoring
    helmValues:
      image:
        registry: quay.io
        repository: prometheus/node-exporter
        tag: v1.6.1
      resources:
        limits:
          cpu: 300m
          memory: 400Mi
        requests:
          cpu: 100m
          memory: 100Mi
  eventExporter:
    chartPath: /etc/helm/event-exporter/event-exporter.tgz
    releaseName: event-exporter
    namespace: monitoring
    helmValues:
      image:
        repository: gcr.io/pingcap-public/third-party/resmoio/kubernetes-event-exporter
        tag: "v1.0"
      resources:
        limits:
          cpu: 200m
          memory: 400Mi
        requests:
          cpu: 50m
          memory: 100Mi
  certManager:
    chartPath: /etc/helm/certmanager/cert-manager-v1.10.0.tgz
    crdPaths: [/etc/helm/certmanager/cert-manager-crds-v1.10.0.yaml]
    namespace: cert-manager
    releaseName: cert-manager
    helmValues:
      image:
        repository: gcr.io/pingcap-public/cert-manager-controller
        tag: v1.10.0
      resources:
        limits:
          cpu: 500m
          memory: 128Mi
        requests:
          cpu: 50m
          memory: 64Mi
      extraArgs:
        - "--issuer-ambient-credentials"
      featureGates: "StableCertificateRequestName=true"
      webhook:
        image:
          repository: gcr.io/pingcap-public/cert-manager-webhook
          tag: v1.10.0
      cainjector:
        image:
          repository: gcr.io/pingcap-public/cert-manager-cainjector
          tag: v1.10.0
      startupapicheck:
        enabled: false
  pcaIssuer:
    chartPath: /etc/helm/pca-issuer/aws-privateca-issuer-1.2.0-fixed.tgz
    crdPaths:
      - /etc/helm/pca-issuer/aws-pca-issuer-crd.yaml
      - /etc/helm/pca-issuer/aws-pca-clusterissuer-crd.yaml
    namespace: cert-manager
    releaseName: aws-pca-issuer
    helmValues:
      image:
        repository: gcr.io/pingcap-public/dbaas/aws-pca-issuer
        tag: v1.2.2
      serviceAccount:
        create: true
      resources:
        limits:
          cpu: 500m
          memory: 128Mi
        requests:
          cpu: 50m
          memory: 64Mi
  nodeLocalDNS:
    chartPath: /etc/helm/node-local-dns
    namespace: kube-system
    releaseName: node-local-dns
    helmValues:
      dnsDomain: "cluster.local"
      dnsServer: "10.100.0.10"
      config:
        bindIp: true
      image:
        repository: registry.k8s.io/dns/k8s-dns-node-cache
        tag: 1.22.28
      resources:
        requests:
          cpu: 25m
          memory: 32Mi
        limits:
          memory: 128Mi