sealed-secrets/controller-podmonitor.jsonnet at main · norin-dlkh/sealed-secrets · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
// Prometheus Pod Monitor manifest
// ref: https://github.com/prometheus-operator/prometheus-operator#customresourcedefinitions

local controller = import 'controller.jsonnet';

controller {
  podMonitor: {
    apiVersion: 'monitoring.coreos.com/v1',
    kind: 'PodMonitor',
    metadata: {
      name: 'sealed-secrets-controller',
      namespace: $.namespace.metadata.namespace,
      labels: {
        name: 'sealed-secrets-controller',
      },
    },
    spec: {
      jobLabel: 'name',
      selector: {
        matchLabels: {
          name: 'sealed-secrets-controller',
        },
      },
      namespaceSelector: {
        matchNames: [
          $.namespace.metadata.namespace,
        ],
      },
      podMetricsEndpoints: [
        {
          honorLabels: true,  // prefer controller metric namespace
          port: 'http',
          interval: '30s',
        },
      ],
      sampleLimit: 1000,
    },
  },
}