diff --git a/values/incubator-infra-k8s-admin-prd-ase1-values.yaml b/values/incubator-infra-k8s-admin-prd-ase1-values.yaml
index 01a18d1..1b1adb3 100644
--- a/values/incubator-infra-k8s-admin-prd-ase1-values.yaml
+++ b/values/incubator-infra-k8s-admin-prd-ase1-values.yaml
@@ -131,4 +131,31 @@ appSpec:
     nameOverride: postgresql
     namespace: postgres
     chartDir: postgresql
-    valuesDir: postgresql
\ No newline at end of file
+    valuesDir: postgresql
+  - name: prometheus
+    # Server only — see custom-values.yaml for exactly why the chart's
+    # alertmanager/kube-state-metrics/node-exporter/pushgateway subcharts
+    # are all disabled, and why that is enough for what consumes this:
+    # toolshed's per-app CPU/memory metrics (docs/PRODUCT-ARCHITECTURE.md
+    # step 5), read straight from the built-in kubernetes-nodes-cadvisor
+    # scrape job.
+    #
+    # Vendored official chart (prometheus-community/prometheus), not
+    # hand-written — unlike postgresql, this one has a real official
+    # chart, and Contour/ArgoCD/Vault/Gitea/Harbor/Jenkins already use
+    # this same vendor-the-official-chart pattern rather than reinventing
+    # RBAC and Kubernetes service discovery by hand.
+    #
+    # nameOverride pinned to exactly "prometheus" for the same reason as
+    # postgresql/gitea above — without it every rendered object name
+    # becomes "prometheus-admin-prd-prd" instead. This one matters more
+    # than most: the chart's server Service renders as
+    # "<release-name>-server", so pinning the release name to "prometheus"
+    # is what makes it "prometheus-server" — the exact hostname toolshed's
+    # PROMETHEUS_URL already points at
+    # (prometheus-server.monitoring.svc.cluster.local), seeded before this
+    # existed so the connection would already be correct the day it did.
+    nameOverride: prometheus
+    namespace: monitoring
+    chartDir: prometheus
+    valuesDir: prometheus
\ No newline at end of file