{{ define "alloy.config.kube_state_metrics.allowList" }}
{{ if (index .Values.metrics "kube-state-metrics").metricsTuning.useDefaultAllowList }}
{{ "default_allow_lists/kube_state_metrics.yaml" | .Files.Get }}
{{ end }}
{{ if (index .Values.metrics "kube-state-metrics").metricsTuning.includeMetrics }}
{{ (index .Values.metrics "kube-state-metrics").metricsTuning.includeMetrics | toYaml }}
{{ end }}
{{ end }}

{{ define "alloy.config.kube_state_metrics" }}
// Kube State Metrics
discovery.relabel "kube_state_metrics" {
  targets = discovery.kubernetes.services.targets
{{- if (index .Values "kube-state-metrics").enabled }}
  rule {
    source_labels = ["__meta_kubernetes_service_label_release"]
    regex = "{{ .Release.Name }}"
    action = "keep"
  }
{{- end }}
  {{- range $k, $v := (index .Values.metrics "kube-state-metrics").labelMatchers }}
  rule {
    source_labels = ["__meta_kubernetes_service_label_{{ include "escape_label" $k }}"]
    regex = "{{ $v }}"
    action = "keep"
  }
  {{- end }}
  rule {
    source_labels = ["__meta_kubernetes_service_port_name"]
    regex = "{{- (index .Values.metrics "kube-state-metrics").service.port -}}"
    action = "keep"
  }
{{- if .Values.metrics.extraRelabelingRules }}
{{ .Values.metrics.extraRelabelingRules | indent 2 }}
{{- end }}
{{- if (index .Values.metrics "kube-state-metrics").extraRelabelingRules }}
{{ (index .Values.metrics "kube-state-metrics").extraRelabelingRules | indent 2 }}
{{- end }}
}

prometheus.scrape "kube_state_metrics" {
  job_name   = "integrations/kubernetes/kube-state-metrics"
  targets    = discovery.relabel.kube_state_metrics.output
  scrape_interval = {{ (index .Values.metrics "kube-state-metrics").scrapeInterval | default .Values.metrics.scrapeInterval | quote }}
{{- if .Values.alloy.alloy.clustering.enabled }}
  clustering {
    enabled = true
  }
{{- end }}
{{- if (index .Values.metrics "kube-state-metrics").service.isTLS }}
  scheme     = "https"
  bearer_token_file = "/var/run/secrets/kubernetes.io/serviceaccount/token"
  tls_config {
    insecure_skip_verify = true
  }
{{- end }}
  forward_to = [prometheus.relabel.kube_state_metrics.receiver]
}

prometheus.relabel "kube_state_metrics" {
  max_cache_size = {{ (index .Values.metrics "kube-state-metrics").maxCacheSize | default .Values.metrics.maxCacheSize | int }}
{{- if or (index .Values.metrics "kube-state-metrics").metricsTuning.useDefaultAllowList (index .Values.metrics "kube-state-metrics").metricsTuning.includeMetrics }}
  rule {
    source_labels = ["__name__"]
    regex = "up|{{ join "|" (include "alloy.config.kube_state_metrics.allowList" . | fromYamlArray) }}"
    action = "keep"
  }
{{- end }}
{{- if (index .Values.metrics "kube-state-metrics").metricsTuning.excludeMetrics }}
  rule {
    source_labels = ["__name__"]
    regex = {{ join "|" (index .Values.metrics "kube-state-metrics").metricsTuning.excludeMetrics | quote }}
    action = "drop"
  }
{{- end }}

{{- if .Values.metrics.extraMetricRelabelingRules }}
{{ .Values.metrics.extraMetricRelabelingRules | indent 2 }}
{{- end }}
{{- if (index .Values.metrics "kube-state-metrics").extraMetricRelabelingRules }}
{{ (index .Values.metrics "kube-state-metrics").extraMetricRelabelingRules | indent 2 }}
{{- end }}
  forward_to = [prometheus.relabel.metrics_service.receiver]
}
{{ end }}
