---
# ServiceMonitor for oauth2-proxy (R-OBS-01, docs/10). CR of monitoring.coreos.com — CARRIED BY
# platform-config (F-MON1). The chart's metrics endpoint is enabled in the helmrelease (metrics.enabled).
# TODO(WS-SEC, bring-up): confirm the metrics port NAME the pinned chart exposes on the Service
#   (commonly `metrics`, :44180) and adjust `port` below if it differs.
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: oauth2-proxy
  namespace: oauth2-proxy
  labels:
    release: kube-prometheus-stack
spec:
  namespaceSelector:
    matchNames:
      - oauth2-proxy
  selector:
    matchLabels:
      app: oauth2-proxy
  endpoints:
    - port: metrics
      path: /metrics
      interval: 30s