WIP keycloak stack (gate probe)

platform/oauth2-proxy/servicemonitor.yaml

@@ -0,0 +1,23 @@
+---
+# ServiceMonitor for oauth2-proxy (R-OBS-01, docs/10). CR of monitoring.coreos.com — CARRIED BY
+# platform-config (F-MON1). The chart's metrics endpoint is enabled in the helmrelease (metrics.enabled).
+# TODO(WS-SEC, bring-up): confirm the metrics port NAME the pinned chart exposes on the Service
+#   (commonly `metrics`, :44180) and adjust `port` below if it differs.
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: oauth2-proxy
+  namespace: oauth2-proxy
+  labels:
+    release: kube-prometheus-stack
+spec:
+  namespaceSelector:
+    matchNames:
+      - oauth2-proxy
+  selector:
+    matchLabels:
+      app: oauth2-proxy
+  endpoints:
+    - port: metrics
+      path: /metrics
+      interval: 30s