feat: add servicemonitor resource template to helm chart

Author: lmbaschiera

charts/connaisseur/templates/servicemonitor.yaml

@@ -0,0 +1,29 @@
+{{- if .Values.kubernetes.serviceMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: {{ include "connaisseur.serviceName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "connaisseur.labels" . | nindent 4 }}
+    {{- with .Values.kubernetes.serviceMonitor.additionalLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  namespaceSelector:
+    matchNames:
+      - {{ .Release.Namespace }}
+  selector:
+    matchLabels:
+      {{- include "connaisseur.selectorLabels" . | nindent 6 }}
+  endpoints:
+    - port: http
+      scheme: https
+      path: /metrics
+      interval: {{ .Values.kubernetes.serviceMonitor.interval }}
+      scrapeTimeout: {{ .Values.kubernetes.serviceMonitor.scrapeTimeout }}
+      {{- with .Values.kubernetes.serviceMonitor.tlsConfig }}
+      tlsConfig:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+{{- end }}

charts/connaisseur/values.yaml

@@ -56,6 +56,22 @@ kubernetes:
     port: 443
   # -----------------------------------------------------
 
+  # changes to the connaisseur ServiceMonitor (Prometheus Operator)
+  # requires the monitoring.coreos.com/v1 CRD to be installed when enabled
+  serviceMonitor:
+    enabled: false
+    interval: 30s
+    scrapeTimeout: 10s
+    # additional labels to attach to the ServiceMonitor; typically used to match
+    # the Prometheus instance's serviceMonitorSelector, e.g.
+    #   release: kube-prometheus-stack
+    additionalLabels: {}
+    # connaisseur serves /metrics over HTTPS using the webhook serving cert.
+    # By default the certificate is not verified; supply ca/serverName here to verify.
+    tlsConfig:
+      insecureSkipVerify: true
+  # -----------------------------------------------------
+
   # changes to connaisseur service account
   serviceaccount:
     create: true