upgrade deprecated kustomization rules (#864)

* upgrade deprecated kustomization rules

* pod monitor

* add gke podmonitoring example

config/crd/kustomization.yaml

@@ -1,10 +1,12 @@
 # This kustomization.yaml is not intended to be run by itself,
 # since it depends on service name and namespace that are out of this kustomize package.
 # It should be run by config/default
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 resources:
-  - bases/ingress.pomerium.io_pomerium.yaml
+- bases/ingress.pomerium.io_pomerium.yaml
 #+kubebuilder:scaffold:crdkustomizeresource
 
 # the following config is for teaching kustomize how to do kustomization for CRDs.
 configurations:
-  - kustomizeconfig.yaml
+- kustomizeconfig.yaml

config/default/kustomization.yaml

@@ -1,7 +1,7 @@
 namespace: pomerium
 commonLabels:
   app.kubernetes.io/name: pomerium
-bases:
+resources:
   - ../crd
   - ../pomerium
   - ../gen_secrets

config/gen_secrets/kustomization.yaml

@@ -1,6 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 namespace: pomerium
 resources:
-  - job.yaml
-  - role_binding.yaml
-  - role.yaml
-  - service_account.yaml
+- job.yaml
+- role_binding.yaml
+- role.yaml
+- service_account.yaml

config/pomerium/deployment/kustomization.yaml

@@ -1,10 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 resources:
-  - base.yaml
-patchesStrategicMerge:
-  - args.yaml
-  - image.yaml
-  - ports.yaml
-  - resources.yaml
-  - no-root.yaml
-  - readonly-root-fs.yaml
-  #- healthchecks.yaml
+- base.yaml
+patches:
+- path: args.yaml
+- path: image.yaml
+- path: ports.yaml
+- path: resources.yaml
+- path: no-root.yaml
+- path: readonly-root-fs.yaml

config/pomerium/kustomization.yaml

@@ -1,9 +1,11 @@
 #
 # Deploys all-in-one controller + core pomerium
 #
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 resources:
-  - namespace.yaml
-  - ./ingressclass.yaml
-  - ./deployment
-  - ./service
-  - ./rbac
+- namespace.yaml
+- ./ingressclass.yaml
+- ./deployment
+- ./service
+- ./rbac

config/pomerium/rbac/kustomization.yaml

@@ -1,4 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 resources:
-  - role.yaml
-  - role_binding.yaml
-  - service_account.yaml
+- role.yaml
+- role_binding.yaml
+- service_account.yaml

config/pomerium/service/kustomization.yaml

@@ -1,3 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 resources:
-  - proxy.yaml
-  - metrics.yaml
+- proxy.yaml
+- metrics.yaml

config/prometheus/coreos-podmonitor.yaml

@@ -0,0 +1,13 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: pomerium
+  namespace: pomerium
+spec:
+  endpoints:
+    - path: /metrics
+      port: metrics
+      scheme: http
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: pomerium

config/prometheus/gke-podmonitor.yaml

@@ -0,0 +1,12 @@
+apiVersion: monitoring.googleapis.com/v1
+kind: PodMonitoring
+metadata:
+  name: pomerium
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: pomerium
+  endpoints:
+  - port: metrics
+    path: /metrics
+    interval: 1m