apiVersion: v1
kind: Namespace
metadata:
  name: monitoring
#---
#apiVersion: v1
#kind: ServiceAccount
#metadata:
#  name: prometheus
#  namespace: monitoring
#---
#apiVersion: rbac.authorization.k8s.io/v1beta1
#kind: ClusterRole
#metadata:
#  name: prometheus
#  namespace: monitoring
#rules:
#  - apiGroups: [""]
#    resources:
#      - nodes
#      - nodes/proxy
#      - services
#      - endpoints
#      - pods
#    verbs: ["get", "list", "watch"]
#  - apiGroups:
#      - extensions
#    resources:
#      - ingresses
#    verbs: ["get", "list", "watch"]
#  - nonResourceURLs: ["/metrics"]
#    verbs: ["get"]
#---
#apiVersion: rbac.authorization.k8s.io/v1beta1
#kind: ClusterRoleBinding
#metadata:
#  name: prometheus
#roleRef:
#  apiGroup: rbac.authorization.k8s.io
#  kind: ClusterRole
#  name: prometheus
#subjects:
#  - kind: ServiceAccount
#    name: prometheus
#    namespace: monitoring
#---
#apiVersion: v1
#kind: ConfigMap
#metadata:
#  name: prometheus-config
#  namespace: monitoring
#data:
#  prometheus.yml: |
#    global:
#    scrape_configs:
#     - job_name: 'kubernetes-kubelet'
#       scheme: https
#       tls_config:
#         ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
#         insecure_skip_verify: true
#       bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
#       kubernetes_sd_configs:
#       - role: node
#       relabel_configs:
#       - action: labelmap
#         regex: __meta_kubernetes_node_label_(.+)
#       - target_label: __address__
#         replacement: kubernetes.default.svc.cluster.local:443
#       - source_labels: [__meta_kubernetes_node_name]
#         regex: (.+)
#         target_label: __metrics_path__
#         replacement: /api/v1/nodes/${1}/proxy/metrics
#     - job_name: 'kubernetes-cadvisor'
#       scheme: https
#       tls_config:
#         ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
#         insecure_skip_verify: true
#       bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
#       kubernetes_sd_configs:
#       - role: node
#       relabel_configs:
#       - action: labelmap
#         regex: __meta_kubernetes_node_label_(.+)
#       - target_label: __address__
#         replacement: kubernetes.default.svc.cluster.local:443
#       - source_labels: [__meta_kubernetes_node_name]
#         regex: (.+)
#         target_label: __metrics_path__
#         replacement: /api/v1/nodes/${1}/proxy/metrics/cadvisor
#     - job_name: 'kubernetes-kube-state'
#       kubernetes_sd_configs:
#       - role: pod
#       relabel_configs:
#       - action: labelmap
#         regex: __meta_kubernetes_pod_label_(.+)
#       - source_labels: [__meta_kubernetes_namespace]
#         action: replace
#         target_label: kubernetes_namespace
#       - source_labels: [__meta_kubernetes_pod_name]
#         action: replace
#         target_label: kubernetes_pod_name
#       - source_labels: [__meta_kubernetes_pod_label_grafanak8sapp]
#         regex: .*true.*
#         action: keep
#       - source_labels: ['__meta_kubernetes_pod_label_daemon', '__meta_kubernetes_pod_node_name']
#         regex: 'node-exporter;(.*)'
#         action: replace
#         target_label: nodename