From 31661aaaf1427c645598fa57814171cac267fd84 Mon Sep 17 00:00:00 2001
From: Willem <wrolleman@nationtech.io>
Date: Mon, 7 Jul 2025 14:33:09 -0400
Subject: [PATCH] fix: prometheus deploys as namespaced resource without
 prometheus-server clusterrole and clusterrolebinding

---
 .../prometheus/helm/prometheus_helm.rs        | 37 ++++++++++++++-----
 1 file changed, 27 insertions(+), 10 deletions(-)

diff --git a/harmony/src/modules/monitoring/prometheus/helm/prometheus_helm.rs b/harmony/src/modules/monitoring/prometheus/helm/prometheus_helm.rs
index 8dd8087..7afde8d 100644
--- a/harmony/src/modules/monitoring/prometheus/helm/prometheus_helm.rs
+++ b/harmony/src/modules/monitoring/prometheus/helm/prometheus_helm.rs
@@ -12,24 +12,41 @@ pub fn prometheus_helm_chart_score(config: Arc<Mutex<PrometheusConfig>>) -> Helm
     let ns = config.namespace.clone().unwrap();
     let values = format!(
         r#"
-releaseNamespace: true
 rbac:
-  create: true
-  namespaced: true
+  create: false
 kube-state-metrics:
   enabled: false
 prometheus-node-exporter:
   enabled: false
+prometheus-pushgateway:
+  enabled: false
+
+server:
+  releaseNamespace: true
+  clusterRole: false
+  clusterRoleBinding: false
+  rbac:
+    create: true
+    namespaced: true
+
+  serverFiles:
+    prometheus.yml:
+      scrape_configs:
+        - job_name: 'prometheus'
+          static_configs:
+            - targets: ['localhost:9090']
+  serviceMonitorNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: {ns}
+  podMonitorNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: {ns}
+
 alertmanager:
   enabled: true
-pushgateway:
-  enabled: false
-server:
-  serviceAccount:
-    create: true
   rbac:
-    create: false
-fullnameOverride: prometheus-{ns}
+    create: true
+    namespaced: true
 "#
     );
     HelmChartScore {