namespace-lister: provide a tls config

The service monitor doesn't know anything about the service it's talking to in terms of TLS, so we need to provide the following information: - A Certificate Authority for requests to authenticate against. - A server name to verify that we're talking to the correct service. Signed-off-by: Andy Sadler <[email protected]>
redhat-appstudio · Jan 29, 2025 · 4262c0f · 4262c0f
1 parent cc103c4
commit 4262c0f
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/components/namespace-lister/base/metrics/monitor.yaml b/components/namespace-lister/base/metrics/monitor.yaml
@@ -14,6 +14,13 @@ spec:
         credentials:
           key: token
           name: metrics-reader
+      tlsConfig:
+        ca:
+          secret:
+            key: tls.crt
+            name: namespace-lister-tls
+            optional: false
+        serverName: namespace-lister.namespace-lister.svc
   selector:
     matchLabels:
       apps: namespace-lister