test

kubernetes/main/apps/observability/kube-prometheus-stack/app/secretproviderclass.yaml

@@ -5,6 +5,13 @@ metadata:
   name: oauth-proxy-config
 spec:
   provider: vault
+  secretObjects:
+    - data:
+      - key: client_id
+        objectName: client_id
+      - key: client_secret
+        objectName: client_secret
+      secretName: prometheus-oauth2-credentials
   parameters:
     roleName: 'prometheus'
     vaultAddress: 'https://vault.darkfellanetwork.com:8200'
@@ -15,3 +22,9 @@ spec:
       - objectName: "darkfellanet-internal-root-ca.crt"
         secretPath: "secrets/data/oauth2/prometheus"
         secretKey: "ca.crt"
+      - objectName: "client_id"
+        secretPath: "secrets/data/oauth2/prometheus"
+        secretKey: "client_id"
+      - objectName: "client_secret"
+        secretPath: "secrets/data/oauth2/prometheus"
+        secretKey: "client_secret"

kubernetes/main/apps/observability/kube-prometheus-stack/app/servicemonitor.yaml

@@ -0,0 +1,28 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: kube-prometheus-stack-prometheus
+spec:
+  endpoints:
+    - oauth2:
+      clientId:
+        secret:
+          name: prometheus-oauth2-credentials
+          key: client_id
+      clientSecret:
+        secret:
+          name: prometheus-oauth2-credentials
+          key: client_secret
+      tokenUrl: https://accounts.darkfellanetwork.com/realms/DarkfellaNET/protocol/openid-connect/token
+      scopes: openid profile email
+    - path: /metrics
+      port: http-web
+    - path: /metrics
+      port: reloader-web
+  namespaceSelector:
+    matchNames:
+      - observability
+  selector:
+    matchLabels:
+      app: kube-prometheus-stack-prometheus
+      release: kube-prometheus-stack