fix: Adding PodMonitor resources

Signed-off-by: Jiri Tyr <[email protected]>
open-policy-agent · Jun 17, 2022 · 2679bf9 · 2679bf9
1 parent d3e62d0
commit 2679bf9
Show file tree

Hide file tree

Showing 8 changed files with 98 additions and 0 deletions.
diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
@@ -148,6 +148,7 @@ _See [Exempting Namespaces](https://open-policy-agent.github.io/gatekeeper/websi
 | service.loadBalancerIP                        | The IP address of LoadBalancer service                                                                                                                                                                                                              | ``                                                                        |
 | service.healthzPort                           | Service port to gatekeeper Webhook health port                                                                                                                                                                                                      | `9090`                                                                    |
 | rbac.create                                   | Enable the creation of RBAC resources                                                                                                                                                                                                               | `true`                                                                    |
+| podMonitor.enabled                            | Whether to install `PodMonitor` resources or not                                                                                                                                                                                                    | `false`                                                                   |
 
 ## Contributing Changes
 

diff --git a/cmd/build/helmify/static/templates/podmonitor-audit-controller.yaml b/cmd/build/helmify/static/templates/podmonitor-audit-controller.yaml
@@ -0,0 +1,23 @@
+{{- if .Values.podMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  labels:
+    app: '{{ template "gatekeeper.name" . }}'
+    chart: '{{ template "gatekeeper.name" . }}'
+    gatekeeper.sh/system: "yes"
+    heritage: '{{ .Release.Service }}'
+    release: '{{ .Release.Name }}'
+  name: gatekeeper-audit-controller
+spec:
+  namespaceSelector:
+    matchNames:
+      - '{{ .Release.Namespace }}'
+  selector:
+    matchLabels:
+      app: '{{ template "gatekeeper.name" . }}'
+      control-plane: audit-controller
+      release: '{{ .Release.Name }}'
+  podMetricsEndpoints:
+    - port: metrics
+{{- end }}
diff --git a/cmd/build/helmify/static/templates/podmonitor-controller-manager.yaml b/cmd/build/helmify/static/templates/podmonitor-controller-manager.yaml
@@ -0,0 +1,23 @@
+{{- if .Values.podMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: gatekeeper-controller-manager
+  labels:
+    app: '{{ template "gatekeeper.name" . }}'
+    chart: '{{ template "gatekeeper.name" . }}'
+    gatekeeper.sh/system: "yes"
+    heritage: '{{ .Release.Service }}'
+    release: '{{ .Release.Name }}'
+spec:
+  namespaceSelector:
+    matchNames:
+      - '{{ .Release.Namespace }}'
+  selector:
+    matchLabels:
+      app: '{{ template "gatekeeper.name" . }}'
+      control-plane: controller-manager
+      release: '{{ .Release.Name }}'
+  podMetricsEndpoints:
+    - port: metrics
+{{- end }}
diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -174,3 +174,5 @@ upgradeCRDs:
   tolerations: []
 rbac:
   create: true
+podMonitor:
+  enabled: false
diff --git a/manifest_staging/charts/gatekeeper/README.md b/manifest_staging/charts/gatekeeper/README.md
@@ -148,6 +148,7 @@ _See [Exempting Namespaces](https://open-policy-agent.github.io/gatekeeper/websi
 | service.loadBalancerIP                        | The IP address of LoadBalancer service                                                                                                                                                                                                              | ``                                                                        |
 | service.healthzPort                           | Service port to gatekeeper Webhook health port                                                                                                                                                                                                      | `9090`                                                                    |
 | rbac.create                                   | Enable the creation of RBAC resources                                                                                                                                                                                                               | `true`                                                                    |
+| podMonitor.enabled                            | Whether to install `PodMonitor` resources or not                                                                                                                                                                                                    | `false`                                                                   |
 
 ## Contributing Changes
 

diff --git a/manifest_staging/charts/gatekeeper/templates/podmonitor-audit-controller.yaml b/manifest_staging/charts/gatekeeper/templates/podmonitor-audit-controller.yaml
@@ -0,0 +1,23 @@
+{{- if .Values.podMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  labels:
+    app: '{{ template "gatekeeper.name" . }}'
+    chart: '{{ template "gatekeeper.name" . }}'
+    gatekeeper.sh/system: "yes"
+    heritage: '{{ .Release.Service }}'
+    release: '{{ .Release.Name }}'
+  name: gatekeeper-audit-controller
+spec:
+  namespaceSelector:
+    matchNames:
+      - '{{ .Release.Namespace }}'
+  selector:
+    matchLabels:
+      app: '{{ template "gatekeeper.name" . }}'
+      control-plane: audit-controller
+      release: '{{ .Release.Name }}'
+  podMetricsEndpoints:
+    - port: metrics
+{{- end }}
diff --git a/manifest_staging/charts/gatekeeper/templates/podmonitor-controller-manager.yaml b/manifest_staging/charts/gatekeeper/templates/podmonitor-controller-manager.yaml
@@ -0,0 +1,23 @@
+{{- if .Values.podMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: gatekeeper-controller-manager
+  labels:
+    app: '{{ template "gatekeeper.name" . }}'
+    chart: '{{ template "gatekeeper.name" . }}'
+    gatekeeper.sh/system: "yes"
+    heritage: '{{ .Release.Service }}'
+    release: '{{ .Release.Name }}'
+spec:
+  namespaceSelector:
+    matchNames:
+      - '{{ .Release.Namespace }}'
+  selector:
+    matchLabels:
+      app: '{{ template "gatekeeper.name" . }}'
+      control-plane: controller-manager
+      release: '{{ .Release.Name }}'
+  podMetricsEndpoints:
+    - port: metrics
+{{- end }}
diff --git a/manifest_staging/charts/gatekeeper/values.yaml b/manifest_staging/charts/gatekeeper/values.yaml
@@ -174,3 +174,5 @@ upgradeCRDs:
   tolerations: []
 rbac:
   create: true
+podMonitor:
+  enabled: false