File tree Expand file tree Collapse file tree 18 files changed +142
-329
lines changed
cronjob-tutorial/testdata/project
getting-started/testdata/project/config
multiversion-tutorial/testdata/project
hack/docs/internal/cronjob-tutorial
pkg/plugins/common/kustomize/v2/scaffolds/internal/templates/config
project-v4-multigroup/config
project-v4-with-plugins/config Expand file tree Collapse file tree 18 files changed +142
-329
lines changed Original file line number Diff line number Diff line change @@ -75,17 +75,6 @@ replacements:
75
75
delimiter : ' .'
76
76
index : 0
77
77
create : true
78
- - select :
79
- kind : ServiceMonitor
80
- group : monitoring.coreos.com
81
- version : v1
82
- name : controller-manager-metrics-monitor
83
- fieldPaths :
84
- - spec.endpoints.0.tlsConfig.serverName
85
- options :
86
- delimiter : ' .'
87
- index : 0
88
- create : true
89
78
90
79
- source :
91
80
kind : Service
@@ -105,17 +94,6 @@ replacements:
105
94
delimiter : ' .'
106
95
index : 1
107
96
create : true
108
- - select :
109
- kind : ServiceMonitor
110
- group : monitoring.coreos.com
111
- version : v1
112
- name : controller-manager-metrics-monitor
113
- fieldPaths :
114
- - spec.endpoints.0.tlsConfig.serverName
115
- options :
116
- delimiter : ' .'
117
- index : 1
118
- create : true
119
97
120
98
- source : # Uncomment the following block if you have any webhook
121
99
kind : Service
Original file line number Diff line number Diff line change 1
1
# Patch for Prometheus ServiceMonitor to enable secure TLS configuration
2
2
# using certificates managed by cert-manager
3
- - op : replace
4
- path : /spec/endpoints/0/tlsConfig
5
- value :
6
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
7
- serverName : SERVICE_NAME.SERVICE_NAMESPACE.svc
8
- insecureSkipVerify : false
9
- ca :
10
- secret :
11
- name : metrics-server-cert
12
- key : ca.crt
13
- cert :
14
- secret :
15
- name : metrics-server-cert
16
- key : tls.crt
17
- keySecret :
18
- name : metrics-server-cert
19
- key : tls.key
3
+ apiVersion : monitoring.coreos.com/v1
4
+ kind : ServiceMonitor
5
+ metadata :
6
+ name : controller-manager-metrics-monitor
7
+ namespace : system
8
+ spec :
9
+ endpoints :
10
+ - tlsConfig :
11
+ insecureSkipVerify : false
12
+ ca :
13
+ secret :
14
+ name : metrics-server-cert
15
+ key : ca.crt
16
+ cert :
17
+ secret :
18
+ name : metrics-server-cert
19
+ key : tls.crt
20
+ keySecret :
21
+ name : metrics-server-cert
22
+ key : tls.key
Original file line number Diff line number Diff line change @@ -4276,11 +4276,7 @@ metadata:
4276
4276
namespace : project-system
4277
4277
spec :
4278
4278
endpoints :
4279
- - bearerTokenFile : /var/run/secrets/kubernetes.io/serviceaccount/token
4280
- path : /metrics
4281
- port : https
4282
- scheme : https
4283
- tlsConfig :
4279
+ - tlsConfig :
4284
4280
ca :
4285
4281
secret :
4286
4282
key : ca.crt
@@ -4293,7 +4289,6 @@ spec:
4293
4289
keySecret :
4294
4290
key : tls.key
4295
4291
name : metrics-server-cert
4296
- serverName : project-controller-manager-metrics-service.project-system.svc
4297
4292
selector :
4298
4293
matchLabels :
4299
4294
app.kubernetes.io/name : project
Original file line number Diff line number Diff line change @@ -75,17 +75,6 @@ patches:
75
75
# delimiter: '.'
76
76
# index: 0
77
77
# create: true
78
- # - select:
79
- # kind: ServiceMonitor
80
- # group: monitoring.coreos.com
81
- # version: v1
82
- # name: controller-manager-metrics-monitor
83
- # fieldPaths:
84
- # - spec.endpoints.0.tlsConfig.serverName
85
- # options:
86
- # delimiter: '.'
87
- # index: 0
88
- # create: true
89
78
#
90
79
# - source:
91
80
# kind: Service
@@ -105,17 +94,6 @@ patches:
105
94
# delimiter: '.'
106
95
# index: 1
107
96
# create: true
108
- # - select:
109
- # kind: ServiceMonitor
110
- # group: monitoring.coreos.com
111
- # version: v1
112
- # name: controller-manager-metrics-monitor
113
- # fieldPaths:
114
- # - spec.endpoints.0.tlsConfig.serverName
115
- # options:
116
- # delimiter: '.'
117
- # index: 1
118
- # create: true
119
97
#
120
98
# - source: # Uncomment the following block if you have any webhook
121
99
# kind: Service
Original file line number Diff line number Diff line change 1
1
# Patch for Prometheus ServiceMonitor to enable secure TLS configuration
2
2
# using certificates managed by cert-manager
3
- - op : replace
4
- path : /spec/endpoints/0/tlsConfig
5
- value :
6
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
7
- serverName : SERVICE_NAME.SERVICE_NAMESPACE.svc
8
- insecureSkipVerify : false
9
- ca :
10
- secret :
11
- name : metrics-server-cert
12
- key : ca.crt
13
- cert :
14
- secret :
15
- name : metrics-server-cert
16
- key : tls.crt
17
- keySecret :
18
- name : metrics-server-cert
19
- key : tls.key
3
+ apiVersion : monitoring.coreos.com/v1
4
+ kind : ServiceMonitor
5
+ metadata :
6
+ name : controller-manager-metrics-monitor
7
+ namespace : system
8
+ spec :
9
+ endpoints :
10
+ - tlsConfig :
11
+ insecureSkipVerify : false
12
+ ca :
13
+ secret :
14
+ name : metrics-server-cert
15
+ key : ca.crt
16
+ cert :
17
+ secret :
18
+ name : metrics-server-cert
19
+ key : tls.crt
20
+ keySecret :
21
+ name : metrics-server-cert
22
+ key : tls.key
Original file line number Diff line number Diff line change @@ -75,17 +75,6 @@ replacements:
75
75
delimiter : ' .'
76
76
index : 0
77
77
create : true
78
- - select :
79
- kind : ServiceMonitor
80
- group : monitoring.coreos.com
81
- version : v1
82
- name : controller-manager-metrics-monitor
83
- fieldPaths :
84
- - spec.endpoints.0.tlsConfig.serverName
85
- options :
86
- delimiter : ' .'
87
- index : 0
88
- create : true
89
78
90
79
- source :
91
80
kind : Service
@@ -105,17 +94,6 @@ replacements:
105
94
delimiter : ' .'
106
95
index : 1
107
96
create : true
108
- - select :
109
- kind : ServiceMonitor
110
- group : monitoring.coreos.com
111
- version : v1
112
- name : controller-manager-metrics-monitor
113
- fieldPaths :
114
- - spec.endpoints.0.tlsConfig.serverName
115
- options :
116
- delimiter : ' .'
117
- index : 1
118
- create : true
119
97
120
98
- source : # Uncomment the following block if you have any webhook
121
99
kind : Service
Original file line number Diff line number Diff line change 1
1
# Patch for Prometheus ServiceMonitor to enable secure TLS configuration
2
2
# using certificates managed by cert-manager
3
- - op : replace
4
- path : /spec/endpoints/0/tlsConfig
5
- value :
6
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
7
- serverName : SERVICE_NAME.SERVICE_NAMESPACE.svc
8
- insecureSkipVerify : false
9
- ca :
10
- secret :
11
- name : metrics-server-cert
12
- key : ca.crt
13
- cert :
14
- secret :
15
- name : metrics-server-cert
16
- key : tls.crt
17
- keySecret :
18
- name : metrics-server-cert
19
- key : tls.key
3
+ apiVersion : monitoring.coreos.com/v1
4
+ kind : ServiceMonitor
5
+ metadata :
6
+ name : controller-manager-metrics-monitor
7
+ namespace : system
8
+ spec :
9
+ endpoints :
10
+ - tlsConfig :
11
+ insecureSkipVerify : false
12
+ ca :
13
+ secret :
14
+ name : metrics-server-cert
15
+ key : ca.crt
16
+ cert :
17
+ secret :
18
+ name : metrics-server-cert
19
+ key : tls.crt
20
+ keySecret :
21
+ name : metrics-server-cert
22
+ key : tls.key
Original file line number Diff line number Diff line change @@ -8122,11 +8122,7 @@ metadata:
8122
8122
namespace : project-system
8123
8123
spec :
8124
8124
endpoints :
8125
- - bearerTokenFile : /var/run/secrets/kubernetes.io/serviceaccount/token
8126
- path : /metrics
8127
- port : https
8128
- scheme : https
8129
- tlsConfig :
8125
+ - tlsConfig :
8130
8126
ca :
8131
8127
secret :
8132
8128
key : ca.crt
@@ -8139,7 +8135,6 @@ spec:
8139
8135
keySecret :
8140
8136
key : tls.key
8141
8137
name : metrics-server-cert
8142
- serverName : project-controller-manager-metrics-service.project-system.svc
8143
8138
selector :
8144
8139
matchLabels :
8145
8140
app.kubernetes.io/name : project
Original file line number Diff line number Diff line change @@ -52,17 +52,6 @@ const certManagerForMetricsAndWebhooks = `#replacements:
52
52
# delimiter: '.'
53
53
# index: 0
54
54
# create: true
55
- # - select:
56
- # kind: ServiceMonitor
57
- # group: monitoring.coreos.com
58
- # version: v1
59
- # name: controller-manager-metrics-monitor
60
- # fieldPaths:
61
- # - spec.endpoints.0.tlsConfig.serverName
62
- # options:
63
- # delimiter: '.'
64
- # index: 0
65
- # create: true
66
55
#
67
56
# - source:
68
57
# kind: Service
@@ -82,17 +71,6 @@ const certManagerForMetricsAndWebhooks = `#replacements:
82
71
# delimiter: '.'
83
72
# index: 1
84
73
# create: true
85
- # - select:
86
- # kind: ServiceMonitor
87
- # group: monitoring.coreos.com
88
- # version: v1
89
- # name: controller-manager-metrics-monitor
90
- # fieldPaths:
91
- # - spec.endpoints.0.tlsConfig.serverName
92
- # options:
93
- # delimiter: '.'
94
- # index: 1
95
- # create: true
96
74
#
97
75
# - source: # Uncomment the following block if you have any webhook
98
76
# kind: Service
Original file line number Diff line number Diff line change @@ -120,17 +120,6 @@ patches:
120
120
# delimiter: '.'
121
121
# index: 0
122
122
# create: true
123
- # - select:
124
- # kind: ServiceMonitor
125
- # group: monitoring.coreos.com
126
- # version: v1
127
- # name: controller-manager-metrics-monitor
128
- # fieldPaths:
129
- # - spec.endpoints.0.tlsConfig.serverName
130
- # options:
131
- # delimiter: '.'
132
- # index: 0
133
- # create: true
134
123
#
135
124
# - source:
136
125
# kind: Service
@@ -150,17 +139,6 @@ patches:
150
139
# delimiter: '.'
151
140
# index: 1
152
141
# create: true
153
- # - select:
154
- # kind: ServiceMonitor
155
- # group: monitoring.coreos.com
156
- # version: v1
157
- # name: controller-manager-metrics-monitor
158
- # fieldPaths:
159
- # - spec.endpoints.0.tlsConfig.serverName
160
- # options:
161
- # delimiter: '.'
162
- # index: 1
163
- # create: true
164
142
#
165
143
# - source: # Uncomment the following block if you have any webhook
166
144
# kind: Service
Original file line number Diff line number Diff line change @@ -44,21 +44,24 @@ func (f *ServiceMonitorPatch) SetTemplateDefaults() error {
44
44
45
45
const serviceMonitorPatchTemplate = `# Patch for Prometheus ServiceMonitor to enable secure TLS configuration
46
46
# using certificates managed by cert-manager
47
- - op: replace
48
- path: /spec/endpoints/0/tlsConfig
49
- value:
50
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
51
- serverName: SERVICE_NAME.SERVICE_NAMESPACE.svc
52
- insecureSkipVerify: false
53
- ca:
54
- secret:
55
- name: metrics-server-cert
56
- key: ca.crt
57
- cert:
58
- secret:
59
- name: metrics-server-cert
60
- key: tls.crt
61
- keySecret:
62
- name: metrics-server-cert
63
- key: tls.key
47
+ apiVersion: monitoring.coreos.com/v1
48
+ kind: ServiceMonitor
49
+ metadata:
50
+ name: controller-manager-metrics-monitor
51
+ namespace: system
52
+ spec:
53
+ endpoints:
54
+ - tlsConfig:
55
+ insecureSkipVerify: false
56
+ ca:
57
+ secret:
58
+ name: metrics-server-cert
59
+ key: ca.crt
60
+ cert:
61
+ secret:
62
+ name: metrics-server-cert
63
+ key: tls.crt
64
+ keySecret:
65
+ name: metrics-server-cert
66
+ key: tls.key
64
67
`
You can’t perform that action at this time.
0 commit comments