Skip to content

ROX-37584: opt in secured-cluster Prometheus scraping - #23448

Draft
parametalol wants to merge 1 commit into
michael/ROX-37585-sensor-metrics-mtlsfrom
michael/ROX-37584-secured-cluster-monitoring
Draft

parametalol wants to merge 1 commit into
michael/ROX-37585-sensor-metrics-mtlsfrom
michael/ROX-37584-secured-cluster-monitoring

Conversation

@parametalol

Copy link
Copy Markdown
Contributor

Description

Add an independent, default-off secured-cluster opt-in for OpenShift Prometheus scraping. When enabled, render the proxy, ServiceMonitor, and monitoring ingress restrictions, and expose the setting through the operator and bundle. Reuse the managed Prometheus client certificate instead of issuing new scrape credentials. Keep the Sensor token API available when the console plugin is disabled.

Depends on #23447. Reusing the existing OpenShift monitoring switch would couple unrelated configurations.

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

  • added unit tests
  • added e2e tests
  • added regression tests
  • added compatibility tests
  • modified existing tests

How I validated my change

  • Operator translation and Helm template tests cover the opt-in. No local tests rerun for opening this PR; CI pending.
  • No benchmarks applicable.

@openshift-ci

openshift-ci Bot commented Oct 15, 2026

Copy link
Copy Markdown

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@github-actions

github-actions Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

🚀 Build Images Ready

Images are ready for commit c50ce30. To use with deploy scripts:

export MAIN_IMAGE_TAG=5.1.x-304-gc50ce30301

@parametalol
parametalol force-pushed the michael/ROX-37584-secured-cluster-monitoring branch from d8f72f9 to 6f0cb44 Compare October 16, 2026 09:46
@parametalol
parametalol force-pushed the michael/ROX-37584-secured-cluster-monitoring branch from 6f0cb44 to bcf019f Compare October 16, 2026 13:42
@parametalol
parametalol removed this pull request from stack #23451 October 16, 2026 13:43
@parametalol
parametalol added this pull request to stack #23471 October 16, 2026 13:43
@parametalol
parametalol force-pushed the michael/ROX-37584-secured-cluster-monitoring branch from bcf019f to 728dbc7 Compare October 16, 2026 14:41
@parametalol
parametalol force-pushed the michael/ROX-37584-secured-cluster-monitoring branch from 728dbc7 to 5c9da28 Compare October 16, 2026 15:45
Add the secured-cluster monitoring opt-in and deployment resources for Prometheus scraping.

AI-assisted: code partially generated with AI.
@parametalol
parametalol force-pushed the michael/ROX-37584-secured-cluster-monitoring branch from 5c9da28 to c50ce30 Compare October 16, 2026 16:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant