monitor_tls_patch.yaml 553 B

12345678910111213141516171819
  1. # Patch for Prometheus ServiceMonitor to enable secure TLS configuration
  2. # using certificates managed by cert-manager
  3. - op: replace
  4. path: /spec/endpoints/0/tlsConfig
  5. value:
  6. # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
  7. serverName: SERVICE_NAME.SERVICE_NAMESPACE.svc
  8. insecureSkipVerify: false
  9. ca:
  10. secret:
  11. name: metrics-server-cert
  12. key: ca.crt
  13. cert:
  14. secret:
  15. name: metrics-server-cert
  16. key: tls.crt
  17. keySecret:
  18. name: metrics-server-cert
  19. key: tls.key