Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,12 @@ resources:
- ../../../../../../config/base/crd
- ../../../../../../config/base/rbac
- ../../../../../../config/base/manager
- metrics
- trusted-ca/catalogd_trusted_ca_configmap.yaml

patches:
- path: patches/manager_namespace_privileged.yaml
- path: patches/manager_namespace_monitored.yaml
- target:
kind: Service
name: service
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: metrics-monitor-role
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
rules:
- apiGroups:
- ""
resources:
- services
- endpoints
- pods
verbs:
- get
- list
- watch
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: metrics-monitor-rolebinding
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: metrics-monitor-role
subjects:
- kind: ServiceAccount
name: prometheus-k8s
namespace: openshift-monitoring
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: metrics-monitor
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
openshift.io/cluster-monitoring: 'true'
spec:
endpoints:
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
interval: 30s
path: /metrics
port: metrics
scheme: https
tlsConfig:
caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
serverName: catalogd-service.openshift-catalogd.svc
namespaceSelector:
matchNames:
- openshift-catalogd
selector:
matchLabels:
app.kubernetes.io/name: catalogd

Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
resources:
- catalogd_metrics_monitor_role.yaml
- catalogd_metrics_monitor_role_binding.yaml
- catalogd_metrics_monitor_servicemonitor.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
$patch: merge
apiVersion: v1
kind: Namespace
metadata:
name: system
labels:
openshift.io/cluster-monitoring: "true"
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
$patch: merge
apiVersion: v1
kind: Namespace
metadata:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ kind: Namespace
metadata:
labels:
app.kubernetes.io/part-of: olm
openshift.io/cluster-monitoring: "true"
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/audit-version: latest
pod-security.kubernetes.io/enforce: privileged
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
name: catalogd-metrics-monitor-role
namespace: openshift-catalogd
rules:
- apiGroups:
- ""
resources:
- services
- endpoints
- pods
verbs:
- get
- list
- watch
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
name: catalogd-metrics-monitor-rolebinding
namespace: openshift-catalogd
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: catalogd-metrics-monitor-role
subjects:
- kind: ServiceAccount
name: prometheus-k8s
namespace: openshift-monitoring
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
labels:
app.kubernetes.io/name: catalogd
app.kubernetes.io/part-of: olm
openshift.io/cluster-monitoring: "true"
name: catalogd-metrics-monitor
namespace: openshift-catalogd
spec:
endpoints:
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
interval: 30s
path: /metrics
port: metrics
scheme: https
tlsConfig:
caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
serverName: catalogd-service.openshift-catalogd.svc
namespaceSelector:
matchNames:
- openshift-catalogd
selector:
matchLabels:
app.kubernetes.io/name: catalogd
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,12 @@ resources:
- ../../../../../../config/base/crd
- ../../../../../../config/base/rbac
- ../../../../../../config/base/manager
- metrics
- trusted-ca/operator_controller_trusted_ca_configmap.yaml

patches:
- path: patches/manager_namespace_privileged.yaml
- path: patches/manager_namespace_monitored.yaml
- target:
kind: Service
name: service
Expand All @@ -32,4 +35,3 @@ patches:
kind: Deployment
name: controller-manager
path: patches/manager_deployment_node_selection.yaml
- path: patches/manager_namespace_privileged.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
resources:
- operator_controller_metrics_monitor_role.yaml
- operator_controller_metrics_monitor_rolebinding.yaml
- operator_controller_metrics_monitor_servicemonitor.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: metrics-monitor-role
labels:
control-plane: operator-controller-controller-manager
rules:
- apiGroups:
- ""
resources:
- services
- endpoints
- pods
verbs:
- get
- list
- watch
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: metrics-monitor-rolebinding
labels:
control-plane: operator-controller-controller-manager
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: metrics-monitor-role
subjects:
- kind: ServiceAccount
name: prometheus-k8s
namespace: openshift-monitoring
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: metrics-monitor
labels:
control-plane: operator-controller-controller-manager
openshift.io/cluster-monitoring: 'true'
spec:
endpoints:
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
interval: 30s
path: /metrics
port: https
scheme: https
tlsConfig:
caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
serverName: operator-controller-service.openshift-operator-controller.svc
namespaceSelector:
matchNames:
- openshift-operator-controller
selector:
matchLabels:
control-plane: operator-controller-controller-manager
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
$patch: merge
apiVersion: v1
kind: Namespace
metadata:
name: system
labels:
openshift.io/cluster-monitoring: "true"
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
$patch: merge
apiVersion: v1
kind: Namespace
metadata:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@ apiVersion: v1
kind: Namespace
metadata:
labels:
openshift.io/cluster-monitoring: "true"
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/audit-version: latest
pod-security.kubernetes.io/enforce: privileged
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
control-plane: operator-controller-controller-manager
name: operator-controller-metrics-monitor-role
namespace: openshift-operator-controller
rules:
- apiGroups:
- ""
resources:
- services
- endpoints
- pods
verbs:
- get
- list
- watch
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
control-plane: operator-controller-controller-manager
name: operator-controller-metrics-monitor-rolebinding
namespace: openshift-operator-controller
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: operator-controller-metrics-monitor-role
subjects:
- kind: ServiceAccount
name: prometheus-k8s
namespace: openshift-monitoring
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
labels:
control-plane: operator-controller-controller-manager
openshift.io/cluster-monitoring: "true"
name: operator-controller-metrics-monitor
namespace: openshift-operator-controller
spec:
endpoints:
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
interval: 30s
path: /metrics
port: https
scheme: https
tlsConfig:
caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
serverName: operator-controller-service.openshift-operator-controller.svc
namespaceSelector:
matchNames:
- openshift-operator-controller
selector:
matchLabels:
control-plane: operator-controller-controller-manager