mirror of
https://gitee.com/devstar/devstar-devcontainer-operator
synced 2025-04-21 09:42:22 +00:00
72bd77fca3
Some checks failed
DevStar DevContainer Operator CI Pipeline - main branch / build-and-push-devstar-devcontainer-operator (push) Failing after 6s
The Service "devstar-devcontainer-kubebuilder-scaffold-controller-manager-metrics-service" is invalid: metadata.name: Invalid value: "devstar-devcontainer-kubebuilder-scaffold-controller-manager-metrics-service": must be no more than 63 characters make: *** [Makefile:140: deploy] Error 1
31 lines
1.3 KiB
YAML
31 lines
1.3 KiB
YAML
# Prometheus Monitor Service (Metrics)
|
|
apiVersion: monitoring.coreos.com/v1
|
|
kind: ServiceMonitor
|
|
metadata:
|
|
labels:
|
|
control-plane: controller-manager
|
|
app.kubernetes.io/name: devcontainer-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
name: controller-manager-metrics-monitor
|
|
namespace: system
|
|
spec:
|
|
endpoints:
|
|
- path: /metrics
|
|
port: https # Ensure this is the name of the port that exposes HTTPS metrics
|
|
scheme: https
|
|
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
tlsConfig:
|
|
# TODO(user): The option insecureSkipVerify: true is not recommended for production since it disables
|
|
# certificate verification. This poses a significant security risk by making the system vulnerable to
|
|
# man-in-the-middle attacks, where an attacker could intercept and manipulate the communication between
|
|
# Prometheus and the monitored services. This could lead to unauthorized access to sensitive metrics data,
|
|
# compromising the integrity and confidentiality of the information.
|
|
# Please use the following options for secure configurations:
|
|
# caFile: /etc/metrics-certs/ca.crt
|
|
# certFile: /etc/metrics-certs/tls.crt
|
|
# keyFile: /etc/metrics-certs/tls.key
|
|
insecureSkipVerify: true
|
|
selector:
|
|
matchLabels:
|
|
control-plane: controller-manager
|