---
controller:
  config:
    use-proxy-protocol: ${use-proxy-protocol}
    proxy-real-ip-cidr: ${proxy-real-ip-cidr}
    use-forwarded-headers: ${use-forwarded-headers}
    compute-full-forwarded-for: ${compute-full-forwarded-for}

  service:
    annotations:
      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ${public.backend-protocol}
      service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: '${public.connection-idle-timeout}'
      service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: '${public.cross-zone-load-balancing-enabled}'
      service.beta.kubernetes.io/aws-load-balancer-type: ${public.type}
      service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "scheme=internet-facing,${tags}"
      %{~ if public.enable-proxy-protocol ~}
      service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: "*"
      %{~ endif ~}
      service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "${public.nlb-target-type}"
      service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
      %{~ if public.eip-allocations != "" ~}
      service.beta.kubernetes.io/aws-load-balancer-eip-allocations: ${public.eip-allocations}
      %{~ endif ~}
      service.beta.kubernetes.io/aws-load-balancer-name: "${public.name}"
    internal:
      annotations:
        service.beta.kubernetes.io/aws-load-balancer-internal: "true"
        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ${internal.backend-protocol}
        service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: '${internal.connection-idle-timeout}'
        service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: '${internal.cross-zone-load-balancing-enabled}'
        service.beta.kubernetes.io/aws-load-balancer-type: ${internal.type}
        service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "scheme=internal,${tags}"
        %{~ if internal.enable-proxy-protocol ~}
        service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: "*"
        %{~ endif ~}
        service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "${public.nlb-target-type}"
        service.beta.kubernetes.io/aws-load-balancer-scheme: "internal"
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: preserve_client_ip.enabled=false
        service.beta.kubernetes.io/aws-load-balancer-name: "${internal.name}"

  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
      additionalLabels:
        release: prometheus-community
      namespaceSelector:
        any: true
...