add monitor

clusters/cl01tl/helm/searxng/templates/external-secret.yaml

@@ -20,6 +20,35 @@ spec:
         metadataPolicy: None
         property: private-key
 
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: searxng-browser-metrics-auth
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: searxng-browser-metrics-auth
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: metrics-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-password
+    - secretKey: metrics-username
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-username
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/searxng/templates/service-monitor.yaml

@@ -0,0 +1,26 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: searxng-browser
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: searxng-browser
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: searxng-browser
+      app.kubernetes.io/instance: {{ .Release.Name }}
+  endpoints:
+    - port: mail
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /metrics
+      basicAuth:
+        password:
+          name: searxng-browser-metrics-auth
+          key: metrics-password
+        username:
+          name: searxng-browser-metrics-auth
+          key: metrics-username