---
# Scrapes cloudflared's own metrics server (:2000, `metrics:` in config.yaml) on every replica.
# kube-prometheus-stack runs with podMonitorSelectorNilUsesHelmValues: false, so Prometheus selects
# every PodMonitor in every namespace; the `release` label is kept for consistency with the
# platform's other monitors. The ingress allow that lets this scrape through the namespace's
# default-deny is cloudflared-allow-prometheus-scrape in networkpolicy.yaml.
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
metadata:
  name: cloudflared
  namespace: cloudflared
  labels:
    app.kubernetes.io/name: cloudflared
    release: kube-prometheus-stack
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: cloudflared
  podMetricsEndpoints:
    - port: metrics
      path: /metrics
      interval: 30s