mirror of
https://github.com/1Password/onepassword-operator.git
synced 2025-10-21 15:08:06 +00:00
cabc020cc6
* Add missing improvements from Operator SDK 1.34.1 These were not mentioned in the upgrade documentation for version 1.34.x (https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.34.0/), but I've found them by compating the release with the previous one (https://github.com/operator-framework/operator-sdk/compare/v1.33.0...v1.34.1). * Upgrade to Operator SDK 1.36.0 Source of upgrade steps: https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.36.0/ Key differences: - Go packages `k8s.io/*` are already at a version higher than the one in the upgrade. - `ENVTEST_K8S_VERSION` is at a version higher than the one in the upgrade - We didn't have the golangci-lint make command before, thus we only needed to add things. * Upgrade to Operator SDK 1.38.0 Source of upgrade steps: https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.38.0/ * Upgrade to Operator SDK 1.39.0 Source of upgrade steps: https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.39.0/ * Upgrade to Operator SDK 1.40.0 Source of upgrade steps: https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.40.0/ I didn't do the "Add app.kubernetes.io/name label to your manifests" since it seems that we have it already, and it's customized. * Address lint errors * Update golangci-lint version used to support Go 1.24 * Improve workflows - Make workflow targets more specific. - Make build workflow only build (i.e. remove test part of it). - Rearrange steps and improve naming for build workflow. * Add back deleted test Initially the test has been removed due to lint saying that it was duplicate code, but it falsely errored since the values are different. * Improve code and add missing upgrade pieces * Upgrade to Operator SDK 1.41.1 Source of upgrade steps: https://sdk.operatorframework.io/docs/upgrading-sdk-version/v1.41.0/ Upgrading to 1.41.1 from 1.40.0 doesn't have any migration steps. Key elements: - Upgrade to golangci-lint v2 - Made the manifests using the updated controller tools * Address linter errors golanci-lint v2 seems to be more robust than the previous one, which is beneficial. Thus, we address the linter errors thrown by v2 and improve our code even further. * Add Makefile improvements These were brought in by comparing the Makefile of a freshly created operator using the latest operator-sdk with ours. * Add missing default kustomization for 1.40.0 upgrade * Bring default kustomization to latest version This is done by putting the file's content from a newly-generated operator. * Switch metrics-bind-address default value back to 8080 This ensures that the upgrade is backwards-compatible. * Add webhook-related scaffolding This enables us to easily add support for webhooks by running `operator-sdk create webhook` whenever we want to add them. * Fix typo
38 lines
1.7 KiB
YAML
38 lines
1.7 KiB
YAML
# Prometheus Monitor Service (Metrics)
|
|
apiVersion: monitoring.coreos.com/v1
|
|
kind: ServiceMonitor
|
|
metadata:
|
|
labels:
|
|
name: onepassword-connect-operator
|
|
control-plane: onepassword-connect-operator
|
|
app.kubernetes.io/name: onepassword-operator
|
|
app.kubernetes.io/instance: controller-manager-metrics-monitor
|
|
app.kubernetes.io/component: metrics
|
|
app.kubernetes.io/created-by: onepassword-connect-operator
|
|
app.kubernetes.io/part-of: onepassword-connect-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
name: onepassword-connect-operator-metrics-monitor
|
|
namespace: system
|
|
spec:
|
|
endpoints:
|
|
- path: /metrics
|
|
port: https # Ensure this is the name of the port that exposes HTTPS metrics
|
|
scheme: https
|
|
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
|
tlsConfig:
|
|
# TODO(user): The option insecureSkipVerify: true is not recommended for production since it disables
|
|
# certificate verification. This poses a significant security risk by making the system vulnerable to
|
|
# man-in-the-middle attacks, where an attacker could intercept and manipulate the communication between
|
|
# Prometheus and the monitored services. This could lead to unauthorized access to sensitive metrics data,
|
|
# compromising the integrity and confidentiality of the information.
|
|
# Please use the following options for secure configurations:
|
|
# caFile: /etc/metrics-certs/ca.crt
|
|
# certFile: /etc/metrics-certs/tls.crt
|
|
# keyFile: /etc/metrics-certs/tls.key
|
|
insecureSkipVerify: true
|
|
selector:
|
|
matchLabels:
|
|
name: onepassword-connect-operator
|
|
control-plane: onepassword-connect-operator
|
|
app.kubernetes.io/name: onepassword-operator
|