feat(k8s/amour/kube-system): monitor kube-controller-manager and kube-scheduler

This also required changing the `bind-address` for both of them in Talos
to 0.0.0.0.

Fixes: #222

Author: uhthomas

k8s/amour/kube_system/BUILD.bazel

@@ -5,6 +5,7 @@ cue_library(
     srcs = [
         "list.cue",
         "namespace_list.cue",
+        "service_list.cue",
         "vm_service_scrape_list.cue",
     ],
     importpath = "github.com/uhthomas/automata/k8s/amour/kube_system",

k8s/amour/kube_system/list.cue

@@ -18,5 +18,6 @@ import (
 
 _items: [
 	#NamespaceList.items,
+	#ServiceList.items,
 	#VMServiceScrapeList.items,
 ]

k8s/amour/kube_system/vm_service_scrape_list.cue

@@ -23,4 +23,34 @@ import "k8s.io/api/core/v1"
 		}]
 		selector: matchLabels: "kubernetes.io/name": "CoreDNS"
 	}
+}, {
+	metadata: name: "kube-controller-manager"
+	spec: {
+		jobLabel: "app.kubernetes.io/name"
+		endpoints: [{
+			port:   "metrics"
+			scheme: "https"
+			tlsConfig: {
+				caFile:             "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
+				insecureSkipVerify: true
+			}
+			bearerTokenFile: "/var/run/secrets/kubernetes.io/serviceaccount/token"
+		}]
+		selector: matchLabels: "app.kubernetes.io/name": metadata.name
+	}
+}, {
+	metadata: name: "kube-scheduler"
+	spec: {
+		jobLabel: "app.kubernetes.io/name"
+		endpoints: [{
+			port:   "metrics"
+			scheme: "https"
+			tlsConfig: {
+				caFile:             "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
+				insecureSkipVerify: true
+			}
+			bearerTokenFile: "/var/run/secrets/kubernetes.io/serviceaccount/token"
+		}]
+		selector: matchLabels: "app.kubernetes.io/name": metadata.name
+	}
 }]

k8s/amour/list.cue

@@ -67,9 +67,9 @@ _#KindWeight: {
 })
 
 _items: [
-	// amour.#ApplySetList.items,
-	// amour.#ClusterSecretStoreList.items,
-	// amour.#CustomResourceDefinitionList.items,
+	amour.#ApplySetList.items,
+	amour.#ClusterSecretStoreList.items,
+	amour.#CustomResourceDefinitionList.items,
 	backup.#List.items,
 	cert_manager_csi_driver.#List.items,
 	cert_manager.#List.items,