controller-podmonitor.jsonnet

// Prometheus Pod Monitor manifest
// ref: https://github.com/prometheus-operator/prometheus-operator#customresourcedefinitions

local controller = import 'controller.jsonnet';

controller {
  podMonitor: {
    apiVersion: 'monitoring.coreos.com/v1',
    kind: 'PodMonitor',
    metadata: {
      name: 'sealed-secrets-controller',
      namespace: $.namespace.metadata.namespace,
      labels: {
        name: 'sealed-secrets-controller',
      },
    },
    spec: {
      jobLabel: 'name',
      selector: {
        matchLabels: {
          name: 'sealed-secrets-controller',
        },
      },
      namespaceSelector: {
        matchNames: [
          $.namespace.metadata.namespace,
        ],
      },
      podMetricsEndpoints: [
        {
          honorLabels: true,  // prefer controller metric namespace
          port: 'http',
          interval: '30s',
        },
      ],
      sampleLimit: 1000,
    },
  },
}