feat(cert-manager): enable service monitor #4644
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector
+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector
@@ -22,16 +22,12 @@
labels:
app: cainjector
app.kubernetes.io/name: cainjector
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: cainjector
app.kubernetes.io/managed-by: Helm
- annotations:
- prometheus.io/path: /metrics
- prometheus.io/scrape: 'true'
- prometheus.io/port: '9402'
spec:
serviceAccountName: cert-manager-cainjector
enableServiceLinks: false
securityContext:
runAsNonRoot: true
seccompProfile:
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager
+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager
@@ -22,16 +22,12 @@
labels:
app: cert-manager
app.kubernetes.io/name: cert-manager
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: controller
app.kubernetes.io/managed-by: Helm
- annotations:
- prometheus.io/path: /metrics
- prometheus.io/scrape: 'true'
- prometheus.io/port: '9402'
spec:
serviceAccountName: cert-manager
enableServiceLinks: false
securityContext:
runAsNonRoot: true
seccompProfile:
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook
+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook
@@ -22,16 +22,12 @@
labels:
app: webhook
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: webhook
app.kubernetes.io/managed-by: Helm
- annotations:
- prometheus.io/path: /metrics
- prometheus.io/scrape: 'true'
- prometheus.io/port: '9402'
spec:
serviceAccountName: cert-manager-webhook
enableServiceLinks: false
securityContext:
runAsNonRoot: true
seccompProfile:
--- HelmRelease: cert-manager/cert-manager ServiceMonitor: cert-manager/cert-manager
+++ HelmRelease: cert-manager/cert-manager ServiceMonitor: cert-manager/cert-manager
@@ -0,0 +1,40 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ name: cert-manager
+ namespace: cert-manager
+ labels:
+ app: cert-manager
+ app.kubernetes.io/name: cert-manager
+ app.kubernetes.io/instance: cert-manager
+ app.kubernetes.io/component: controller
+ app.kubernetes.io/managed-by: Helm
+ prometheus: default
+spec:
+ jobLabel: cert-manager
+ selector:
+ matchExpressions:
+ - key: app.kubernetes.io/name
+ operator: In
+ values:
+ - cainjector
+ - cert-manager
+ - webhook
+ - key: app.kubernetes.io/instance
+ operator: In
+ values:
+ - cert-manager
+ - key: app.kubernetes.io/component
+ operator: In
+ values:
+ - cainjector
+ - controller
+ - webhook
+ endpoints:
+ - targetPort: 9402
+ path: /metrics
+ interval: 60s
+ scrapeTimeout: 30s
+ honorLabels: false
+ |
🦙 MegaLinter status: ✅ SUCCESS
See detailed report in MegaLinter reports MegaLinter is graciously provided by OX Security |
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/app Kustomization: flux-system/apps-cert-manager HelmRelease: cert-manager/cert-manager
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/app Kustomization: flux-system/apps-cert-manager HelmRelease: cert-manager/cert-manager
@@ -1,11 +1,12 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
labels:
+ app.kubernetes.io/name: cert-manager
kustomize.toolkit.fluxcd.io/name: apps-cert-manager
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cert-manager
namespace: cert-manager
spec:
chart:
@@ -41,12 +42,15 @@
installCRDs: true
podDnsConfig:
nameservers:
- 1.1.1.1
- 9.9.9.9
podDnsPolicy: None
+ prometheus:
+ servicemonitor:
+ enabled: true
replicaCount: 1
resources:
limits:
memory: 100Mi
requests:
cpu: 10m
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-selfsigned
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-selfsigned
@@ -1,11 +1,12 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cert-manager-cluster-issuer-selfsigned
namespace: cert-manager
spec:
chart:
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-staging
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-staging
@@ -1,11 +1,12 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cert-manager-cluster-issuer-staging
namespace: cert-manager
spec:
chart:
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-production
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers HelmRelease: cert-manager/cert-manager-cluster-issuer-production
@@ -1,11 +1,12 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cert-manager-cluster-issuer-production
namespace: cert-manager
spec:
chart:
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-selfsigned
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-selfsigned
@@ -10,11 +10,12 @@
name: selfsigned
spec:
selfSigned: {}
kind: ConfigMap
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cluster-issuer-selfsigned
namespace: cert-manager
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-staging
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-staging
@@ -24,11 +24,12 @@
selector:
dnsZones:
- techtales.io
kind: ConfigMap
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cluster-issuer-staging
namespace: cert-manager
--- kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-production
+++ kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers Kustomization: flux-system/apps-cert-manager-issuers ConfigMap: cert-manager/cluster-issuer-production
@@ -24,11 +24,12 @@
selector:
dnsZones:
- techtales.io
kind: ConfigMap
metadata:
labels:
+ app.kubernetes.io/name: cert-manager-issuers
kustomize.toolkit.fluxcd.io/name: apps-cert-manager-issuers
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: cluster-issuer-production
namespace: cert-manager
--- kubernetes/talos-flux/apps Kustomization: flux-system/flux-apps Kustomization: flux-system/apps-cert-manager
+++ kubernetes/talos-flux/apps Kustomization: flux-system/flux-apps Kustomization: flux-system/apps-cert-manager
@@ -8,24 +8,32 @@
labels:
kustomize.toolkit.fluxcd.io/name: flux-apps
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: apps-cert-manager
namespace: flux-system
spec:
+ commonMetadata:
+ labels:
+ app.kubernetes.io/name: cert-manager
decryption:
provider: sops
secretRef:
name: sops-age
- interval: 10m
+ dependsOn:
+ - name: apps-kube-prometheus-stack
+ interval: 30m
path: ./kubernetes/talos-flux/apps/cert-manager/cert-manager/app
postBuild:
substituteFrom:
- kind: ConfigMap
name: cluster-settings
- kind: Secret
name: cluster-secrets
prune: true
+ retryInterval: 1m
sourceRef:
kind: GitRepository
name: home-ops
+ targetNamespace: cert-manager
+ timeout: 5m
wait: true
--- kubernetes/talos-flux/apps Kustomization: flux-system/flux-apps Kustomization: flux-system/apps-cert-manager-issuers
+++ kubernetes/talos-flux/apps Kustomization: flux-system/flux-apps Kustomization: flux-system/apps-cert-manager-issuers
@@ -5,24 +5,32 @@
labels:
kustomize.toolkit.fluxcd.io/name: flux-apps
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: apps-cert-manager-issuers
namespace: flux-system
spec:
+ commonMetadata:
+ labels:
+ app.kubernetes.io/name: cert-manager-issuers
decryption:
provider: sops
secretRef:
name: sops-age
- interval: 10m
+ dependsOn:
+ - name: apps-cert-manager
+ interval: 30m
path: ./kubernetes/talos-flux/apps/cert-manager/cert-manager/issuers
postBuild:
substituteFrom:
- kind: ConfigMap
name: cluster-settings
- kind: Secret
name: cluster-secrets
prune: false
+ retryInterval: 1m
sourceRef:
kind: GitRepository
name: home-ops
+ targetNamespace: cert-manager
+ timeout: 5m
wait: true |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.