config

type AuthMode string

type Config struct {
	// AuthMode controls where the bearer token is obtained for authenticating
	// against Prometheus and Alertmanager endpoints.
	// Valid values: "header" (default) - read from the request context authorization header,
	//              "kubeconfig" - read from the kubeconfig/REST config.
	AuthMode AuthMode `toml:"auth_mode,omitempty"`
	// PrometheusURL is the URL of the Prometheus/Thanos Querier endpoint.
	// This field is required. Example: "https://thanos-querier-openshift-monitoring.apps.example.com"
	PrometheusURL string `toml:"prometheus_url,omitempty"`

	// AlertmanagerURL is the URL of the Alertmanager endpoint.
	// This field is optional. Example: "https://alertmanager-main-openshift-monitoring.apps.example.com"
	AlertmanagerURL string `toml:"alertmanager_url,omitempty"`

	// Insecure controls whether to skip TLS certificate verification.
	// Default: false (verify certificates)
	Insecure bool `toml:"insecure,omitempty"`

	// Guardrails controls which query safety checks are enabled.
	// Valid values: "all" (default), "none", or comma-separated list of:
	//   - "disallow-explicit-name-label"
	//   - "require-label-matcher"
	//   - "disallow-blanket-regex"
	Guardrails string `toml:"guardrails,omitempty"`

	// MaxMetricCardinality is the maximum allowed series count per metric.
	// Set to 0 to disable this check.
	// Default: 20000
	MaxMetricCardinality uint64 `toml:"max_metric_cardinality,omitempty"`

	// MaxLabelCardinality is the maximum allowed label value count for blanket regex.
	// Only takes effect if disallow-blanket-regex is enabled.
	// Set to 0 to always disallow blanket regex.
	// Default: 500
	MaxLabelCardinality uint64 `toml:"max_label_cardinality,omitempty"`

	// RangeQueryFullResponse controls whether range queries return full data points
	// instead of summary statistics.
	// Default: false (return summary statistics)
	RangeQueryFullResponse bool `toml:"range_query_full_response,omitempty"`
}