Explicitly bind metrics 8443 as containerPort in kustomize and helm

Author: ardaguclu

charts/lws/templates/manager/deployment.yaml

@@ -48,6 +48,11 @@ spec:
             - name: webhook-server
               containerPort: {{ .Values.service.port }}
               protocol: TCP
+            {{- if .Values.enablePrometheus }}
+            - containerPort: 8443
+              name: metrics
+              protocol: TCP
+            {{- end }}
           livenessProbe:
             httpGet:
               path: /healthz

charts/lws/templates/manager/service.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.enablePrometheus }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -14,4 +15,5 @@ spec:
       protocol: TCP
       targetPort: 8443
   selector:
-    control-plane: controller-manager
+    control-plane: controller-manager
+{{- end }}

config/default/kustomization.yaml

@@ -36,6 +36,8 @@ patches:
 # Other configurations
 - path: manager_config_patch.yaml
 
+- path: manager_metrics_patch.yaml
+
 # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'.
 # Uncomment 'CERTMANAGER' sections in crd/kustomization.yaml to enable the CA injection in the admission webhooks.
 # 'CERTMANAGER' needs to be enabled to use ca injection

config/default/manager_metrics_patch.yaml

@@ -0,0 +1,15 @@
+# This patch exposes 8443 port used by metrics service
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: controller-manager
+  namespace: system
+spec:
+  template:
+    spec:
+      containers:
+        - name: manager
+          ports:
+            - containerPort: 8443
+              name: metrics
+              protocol: TCP