{{ define "agent.config.kubelet" }}
// Kubelet
discovery.relabel "kubelet" {
  targets = discovery.kubernetes.nodes.targets
  rule {
    target_label = "__address__"
    replacement  = "kubernetes.default.svc.cluster.local:443"
  }
  rule {
    source_labels = ["__meta_kubernetes_node_name"]
    regex         = "(.+)"
    replacement   = "/api/v1/nodes/${1}/proxy/metrics"
    target_label  = "__metrics_path__"
  }
}

prometheus.scrape "kubelet" {
  job_name   = "integrations/kubernetes/kubelet"
  targets  = discovery.relabel.kubelet.output
  scheme   = "https"
  bearer_token_file = "/var/run/secrets/kubernetes.io/serviceaccount/token"
  tls_config {
    insecure_skip_verify = true
  }
{{- if .Values.metrics.kubelet.allowList }}
  forward_to = [prometheus.relabel.kubelet.receiver]
{{- else }}
  forward_to = [prometheus.remote_write.grafana_cloud_prometheus.receiver]
{{- end }}
}
{{- if .Values.metrics.kubelet.allowList }}

prometheus.relabel "kubelet" {
  rule {
    source_labels = ["__name__"]
    regex = "up|{{ join "|" .Values.metrics.kubelet.allowList }}"
    action = "keep"
  }
  forward_to = [prometheus.remote_write.grafana_cloud_prometheus.receiver]
}
{{- end }}
{{ end }}
