Chapter 13. Monitoring RHACS

Procedure

1. On the OpenShift Container Platform web console, go to the Operators Installed Operators page.
2. Select the RHACS Operator from the list of installed Operators.
3. Click on the Central tab.
4. From the list of Central instances, click on a Central instance for which you want to enable monitoring.

5. Click on the YAML tab and update the YAML configuration as shown in the following example:

   monitoring:
       openshift:
           enabled: false

   Copy to Clipboard Toggle word wrap

Procedure

1. Update the configuration file with the following value:

   monitoring.openshift.enabled: false

   Copy to Clipboard Toggle word wrap
2. Run the helm upgrade command and specify the configuration files.

Procedure

1. On the OpenShift Container Platform web console, go to the Operators Installed Operators page.
2. Select the Red Hat Advanced Cluster Security for Kubernetes Operator from the list of installed Operators.
3. Click on the Central tab.
4. From the list of Central instances, click on a Central instance for which you want to enable monitoring for.

5. Click on the YAML tab and update the YAML configuration:

   • For monitoring Central, enable the central.monitoring.exposeEndpoint configuration option for the Central custom resource.
   • For monitoring Scanner, enable the scanner.monitoring.exposeEndpoint configuration option for the Central custom resource.
6. Click Save.

Procedure

1. Create a new servicemonitor.yaml file with the following content:

   apiVersion: monitoring.coreos.com/v1
   kind: ServiceMonitor
   metadata:
     name: prometheus-stackrox
     namespace: stackrox
   spec:
     endpoints:
       - interval: 30s
         port: monitoring
         scheme: http
     selector:
       matchLabels:
         app.kubernetes.io/name: <stackrox-service> 

   1

   Copy to Clipboard Toggle word wrap

   1

   The labels must match with the Service resource that you want to monitor. For example, central or scanner.

2. Apply the YAML to the cluster:

   $ oc apply -f servicemonitor.yaml 

   1

   Copy to Clipboard Toggle word wrap

   1

   If you use Kubernetes, enter kubectl instead of oc.