panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow configuring spire-agent prometheus listening address (#701)

Browse Source
This commit is contained in:
Matthew McKeen
2025-11-27 22:36:56 -07:00
committed by GitHub
parent e1a1484511
commit 95fa0deb5f
3 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-agent/README.md
+1
View File
@@ -109,6 +109,7 @@ A Helm chart to install the SPIRE agent.
| `sds.disableSPIFFECertValidation` | Disable Envoy SDS custom validation | `false` |
| `telemetry.prometheus.enabled` | Flag to enable prometheus monitoring | `false` |
| `telemetry.prometheus.port` | Port for prometheus metrics | `9988` |
| `telemetry.prometheus.host` | Host for prometheus metrics | `0.0.0.0` |
| `telemetry.prometheus.podMonitor.enabled` | Enable podMonitor for prometheus | `false` |
| `telemetry.prometheus.podMonitor.namespace` | Override where to install the podMonitor, if not set will use the same namespace as the spire-agent | `""` |
| `telemetry.prometheus.podMonitor.labels` | Pod labels to filter for prometheus monitoring | `{}` |
charts/spire/charts/spire-agent/templates/configmap.yaml
+1 -1
View File
@@ -169,7 +169,7 @@ health_checks:
{{- if or (dig "telemetry" "prometheus" "enabled" .Values.telemetry.prometheus.enabled .Values.global) (and (dig "spire" "recommendations" "enabled" false .Values.global) (dig "spire" "recommendations" "prometheus" true .Values.global)) }}
telemetry:
- Prometheus:
- host: "0.0.0.0"
- host: {{ .Values.telemetry.prometheus.host }}
port: {{ .Values.telemetry.prometheus.port }}
{{- end }}
charts/spire/charts/spire-agent/values.yaml
+2
View File
@@ -259,6 +259,8 @@ telemetry:
enabled: false
## @param telemetry.prometheus.port Port for prometheus metrics
port: 9988
## @param telemetry.prometheus.host Host for prometheus metrics
host: "0.0.0.0"
podMonitor:
## @param telemetry.prometheus.podMonitor.enabled Enable podMonitor for prometheus
enabled: false