From 8c9eb9befcf8b78dac8c0b341eac3c602f4e3beb Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Tue, 7 Jul 2026 00:08:06 +1000 Subject: [PATCH] cert-manager: scrape metrics (follow-up to #239) (#241) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Follow-up to #239. Adds a `VMServiceScrape` for cert-manager's existing webhook (`metrics` :9402) and cainjector (`http-metrics` :9402) services so the observability VMAgent collects them. No chart change needed. (The controller's own metrics need `prometheus.enabled` in the chart to expose a metrics service — separate follow-up.) Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/241 Co-authored-by: Ben Vincent Co-committed-by: Ben Vincent --- apps/base/cert-manager/kustomization.yaml | 1 + apps/base/cert-manager/vmservicescrape.yaml | 17 +++++++++++++++++ 2 files changed, 18 insertions(+) create mode 100644 apps/base/cert-manager/vmservicescrape.yaml diff --git a/apps/base/cert-manager/kustomization.yaml b/apps/base/cert-manager/kustomization.yaml index 23bd056..f1fcada 100644 --- a/apps/base/cert-manager/kustomization.yaml +++ b/apps/base/cert-manager/kustomization.yaml @@ -7,3 +7,4 @@ resources: - serviceaccount.yaml - clusterrole.yaml - clusterrolebinding.yaml + - vmservicescrape.yaml diff --git a/apps/base/cert-manager/vmservicescrape.yaml b/apps/base/cert-manager/vmservicescrape.yaml new file mode 100644 index 0000000..dc9b255 --- /dev/null +++ b/apps/base/cert-manager/vmservicescrape.yaml @@ -0,0 +1,17 @@ +--- +# Scrape cert-manager webhook + cainjector metrics endpoints. +# Picked up by the observability VMAgent (selectAllByDefault). +apiVersion: operator.victoriametrics.com/v1beta1 +kind: VMServiceScrape +metadata: + name: cert-manager + namespace: cert-manager +spec: + selector: + matchLabels: + app.kubernetes.io/instance: cert-manager + endpoints: + - port: metrics + path: /metrics + - port: http-metrics + path: /metrics