From 771e568a6025318beecadd1a1097bc45565c36af Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Sun, 10 May 2026 19:47:26 +0000
Subject: [PATCH] chore: Update manifests after change

---
 .../dawarich/Deployment-dawarich.yaml         | 10 +++++++++
 ...alSecret-dawarich-metrics-credentials.yaml | 22 +++++++++++++++++++
 .../dawarich/ServiceMonitor-dawarich.yaml     |  9 +++++++-
 3 files changed, 40 insertions(+), 1 deletion(-)
 create mode 100644 clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-metrics-credentials.yaml

diff --git a/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml b/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
index bd37294ff..e3d831a07 100644
--- a/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
@@ -103,6 +103,16 @@ spec:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: "9394"
+            - name: METRICS_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: user
+                  name: dawarich-metrics-credentials
+            - name: METRICS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: dawarich-metrics-credentials
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-metrics-credentials.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-metrics-credentials.yaml
new file mode 100644
index 000000000..4e709caff
--- /dev/null
+++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-metrics-credentials.yaml
@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: dawarich-metrics-credentials
+  namespace: dawarich
+  labels:
+    app.kubernetes.io/name: dawarich-metrics-credentials
+    app.kubernetes.io/instance: dawarich
+    app.kubernetes.io/part-of: dawarich
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: user
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: user
+    - secretKey: password
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: password
diff --git a/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml b/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml
index 7274bb886..3a2acffa1 100644
--- a/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml
@@ -18,7 +18,14 @@ spec:
       app.kubernetes.io/instance: dawarich
       app.kubernetes.io/name: dawarich
   endpoints:
-    - interval: 30s
+    - basicAuth:
+        password:
+          key: password
+          name: dawarich-metrics-credentials
+        username:
+          key: user
+          name: dawarich-metrics-credentials
+      interval: 30s
       path: /metrics
       port: metrics
       scrapeTimeout: 15s