feat: added support for exposing the metrics via kyverno-svc service

Signed-off-by: Yashvardhan Kukreja <yash.kukreja.98@gmail.com>

charts/kyverno/templates/deployment.yaml

@@ -91,6 +91,9 @@ spec:
           - containerPort: 9443
             name: https
             protocol: TCP
+          - containerPort: 8000
+            name: metrics-port
+            protocol: TCP  
           env:
           - name: INIT_CONFIG
             value: {{ template "kyverno.configMapName" . }}

charts/kyverno/templates/service.yaml

@@ -16,5 +16,12 @@ spec:
     {{- if and (eq .Values.service.type "NodePort") (not (empty .Values.service.nodePort)) }}
     nodePort: {{ .Values.service.nodePort }}
     {{- end }}
+  - port: {{ .Values.service.metricsPort }}
+    targetPort: 8000
+    protocol: TCP
+    name: metrics-port
+    {{- if and (eq .Values.service.type "NodePort") (not (empty .Values.service.nodePort)) }}
+    nodePort: {{ .Values.service.metricsNodePort }}
+    {{- end }}
   selector: {{ include "kyverno.matchLabels" . | nindent 4 }}
   type: {{ .Values.service.type }}

charts/kyverno/values.yaml

@@ -145,6 +145,10 @@ service:
   type: ClusterIP
   # Only used if service.type is NodePort
   nodePort:
+  ## Kyverno's metrics server will be exposed at this port
+  metricsPort: 8000
+  ## The Node's port which will allow access Kyverno's metrics at the host level. Only used if service.type is NodePort.
+  metricsNodePort: 8000
   ## Provide any additional annotations which may be required. This can be used to
   ## set the LoadBalancer service type to internal only.
   ## ref: https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer

definitions/k8s-resource/clusterroles.yaml

@@ -15,7 +15,11 @@ metadata:
 spec:
   ports:
   - port: 443
+    name: https
     targetPort: https
+  - port: 8000
+    name: metrics-port
+    targetPort: metrics-port
   selector:
     app: kyverno
     app.kubernetes.io/name: kyverno

definitions/manifest/deployment.yaml

@@ -58,6 +58,9 @@ spec:
             - containerPort: 9443
               name: https
               protocol: TCP
+            - containerPort: 8000
+              name: metrics-port
+              protocol: TCP
           env:
             - name: INIT_CONFIG
               value: init-config