tempo:
  reportingEnabled: true
  storage:
    trace:
      backend: s3
      s3:
        bucket: {{ .Values.tempo.s3.bucket | default "tempo-traces" }}
        endpoint: {{ .Values.tempo.s3.endpoint }}
        prefix: traces
        access_key: ${S3KEY}
        secret_key: ${S3SECRET}
        forcepathstyle: true
        insecure: true
      local:
        path: /var/tempo/traces
      wal:
        path: /var/tempo/wal
  metricsGenerator:
    enabled: true
    remoteWriteUrl: "http://prom-prometheus.prometheus:9090/api/v1/write"
  extraArgs: { config.expand-env=true }
  extraEnv:
  - name: S3KEY
    valueFrom:
      secretKeyRef:
        name: {{ .Values.tempo.s3.secret.name | default "s3-credentials"}}
        key: {{ .Values.tempo.s3.secret.access_key | default "access_key" }}
  - name: S3SECRET
    valueFrom:
      secretKeyRef:
        name: {{ .Values.tempo.s3.secret.name | default "s3-credentials"}}
        key: {{ .Values.tempo.s3.secret.access_secret | default "access_secret" }}
tempoQuery:
  ingress:
    enabled: true
    ingressClassName: nginx
    annotations:
      cert-manager.io/cluster-issuer: {{ .Values.clusterConfig.ingress_clusterissuer }}
      nginx.ingress.kubernetes.io/ssl-redirect: "true"
      oceanbox.io/expose: internal
    path: /
    pathType: Prefix
    hosts:
      - query.tempo.{{ .Values.clusterConfig.domain }}
    tls:
      - secretName: tempo-query-tls
        hosts:
        - query.tempo.{{ .Values.clusterConfig.domain }}
