monitoring

func ReconcileKubeAPIServerServiceMonitor ¶

func ReconcileKubeAPIServerServiceMonitor(serviceMonitor *prometheusoperatorv1.ServiceMonitor) error

func ReconcileMetricsForwarderConfigMap ¶ added in v0.1.76

func ReconcileMetricsForwarderConfigMap(cm *corev1.ConfigMap, routeHost string) error

ReconcileMetricsForwarderConfigMap builds the HAProxy configuration for TCP passthrough mode. HAProxy is opaque to TLS — the TLS ClientHello (including SNI) passes through transparently to the metrics-proxy.

func ReconcileMetricsForwarderDeployment ¶ added in v0.1.76

func ReconcileMetricsForwarderDeployment(deployment *appsv1.Deployment, haproxyImage string, configHash string) error

func ReconcileMetricsForwarderPodMonitor ¶ added in v0.1.76

func ReconcileMetricsForwarderPodMonitor(podMonitor *prometheusoperatorv1.PodMonitor, componentNames []string, routeHost string) error

ReconcileMetricsForwarderPodMonitor builds a PodMonitor with one endpoint per control-plane component. It uses the tls-client-certificate-auth scrape class so CMO automatically injects the client cert from metrics-client-certs. The per-endpoint CA override references the metrics-proxy-serving-ca ConfigMap, which takes precedence over the scrape class's caFile (service-serving CA).

func ReconcileMetricsForwarderServingCA ¶ added in v0.1.76

func ReconcileMetricsForwarderServingCA(cm *corev1.ConfigMap, caCert []byte) error

ReconcileMetricsForwarderServingCA syncs the metrics-proxy serving CA into a ConfigMap in the guest cluster. Prometheus uses this CA to verify the metrics-proxy's TLS certificate through the TCP passthrough proxy.