Attention Iron Bank Customers: On March 27, 2025, we are moving SBOM artifacts from the Anchore Scan job to the Build job to streamline the container hardening pipeline. If you currently download SBOMs from the Anchore Scan job, you can still get them from the Build job and from other sources, including IBFE and image attestations.
Remove BB created servicemonitor and enable upstream ones
With the 14.9.2 update the upstream Gitlab chart is now capable of creating service and pod monitors for a number of metrics endpoints. We should make sure that these are conditionally enabled (when monitoring is enabled at the BB level).
AC:
Big Bang created servicemonitor deleted
Gitlab upstream monitors conditionally enabled when monitoring is enabled
All targets showing as up/healthy in Prometheus (may require network policy changes)
0 of 3 checklist items completed
Designs
Child items
0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
per @kevin.wilder 's advice, I've unassigned this issue. I will be OOO back on the 23rd. Someone else may work on this. However, Kevin and I already spent some time working on this, so please check with at least one of us before proceeding.
From a quick check I did see the same issue as above. However... it doesn't seem like the capabilities conditional on its own is problematic. Test by deploying monitoring + any other helm chart with this template:
{{- if .Capabilities.APIVersions.Has "monitoring.coreos.com/v1"}}apiVersion:monitoring.coreos.com/v1kind:ServiceMonitormetadata:name:testnamespace:{{$.Release.Namespace}}spec:namespaceSelector:matchNames:-{{$.Release.Namespace}}selector:matchLabels:app:testendpoints:-port:http-metricspath:'/metrics'{{- end}}
You should find the test servicemonitor created. That leads me to thinking that the other conditional on these servicemonitors is the real problem (or at least getting the right values to enable that).