values-gcp.yaml

# GCP (GKE) overlay:
#   - Loki chunks and Tempo trace blocks in GCS, keyless via GKE Workload
#     Identity — no service-account keys, Application Default Credentials
#     resolve through the annotated KSA
#   - GCP resource detection on the node collector
#
# Replace every <placeholder> before use. The Google service accounts need
# roles/storage.objectAdmin on their buckets, and each KSA below must be
# bound with roles/iam.workloadIdentityUser.
# For Grafana with an external database and SSO, see values-azure.yaml for
# the pattern (Cloud SQL + your IdP work the same way through grafana.ini).

lgtm:
  clusterName: <cluster-name>            # e.g. gke-prod

collectors:
  resourceDetection:
    # gcp → cloud.availability_zone, cloud.region, k8s.cluster.name, etc.
    # Tune individual attributes the same way the azure example does.
    detectors: [gcp]

loki:
  loki:
    storage:
      type: gcs
      bucketNames:
        chunks: <loki-chunks-bucket>
        ruler: <loki-ruler-bucket>
    schemaConfig:
      configs:
        - from: "2024-01-01"
          store: tsdb
          object_store: gcs
          schema: v13
          index:
            prefix: loki_index_
            period: 24h
    compactor:
      retention_enabled: true
      delete_request_store: gcs
  serviceAccount:
    name: loki
    annotations:
      iam.gke.io/gcp-service-account: <loki-gsa>@<project-id>.iam.gserviceaccount.com

tempo:
  tempo:
    storage:
      trace:
        backend: gcs
        gcs:
          bucket_name: <tempo-traces-bucket>
        wal:
          path: /var/tempo/wal
  serviceAccount:
    name: tempo
    annotations:
      iam.gke.io/gcp-service-account: <tempo-gsa>@<project-id>.iam.gserviceaccount.com
  # WAL + metrics-generator local-blocks only — trace blocks live in GCS
  persistence:
    enabled: true
    size: 15Gi