feat: add ServiceMonitors and enable metrics scraping

- SeaweedFS: enable -metricsPort=9091 on master/volume/filer, add
  service labels, create ServiceMonitor
- Gitea: enable metrics in config, create ServiceMonitor
- Hydra/Kratos: standalone ServiceMonitors (chart templates require
  .Capabilities.APIVersions unavailable in kustomize helm template)
- LiveKit: add prometheus_port=6789, standalone ServiceMonitor
  (disabled in kustomization — host firewall blocks port 6789)
- OpenSearch: revert prometheus-exporter attempt (no plugin for v3.x),
  add service label for future exporter sidecar

base/storage/seaweedfs-filer.yaml

@@ -33,6 +33,7 @@ spec:
             - -s3.port=8333
             - -s3.config=/etc/seaweedfs/s3.json
             - -master=seaweedfs-master.storage.svc.cluster.local:9333
+            - -metricsPort=9091
           ports:
             - name: http
               containerPort: 8888
@@ -43,6 +44,9 @@ spec:
             - name: grpc
               containerPort: 18888
               protocol: TCP
+            - name: metrics
+              containerPort: 9091
+              protocol: TCP
           envFrom:
             - secretRef:
                 name: seaweedfs-s3-credentials
@@ -79,6 +83,8 @@ kind: Service
 metadata:
   name: seaweedfs-filer
   namespace: storage
+  labels:
+    app: seaweedfs-filer
 spec:
   selector:
     app: seaweedfs-filer
@@ -92,3 +98,6 @@ spec:
     - name: grpc
       port: 18888
       targetPort: 18888
+    - name: metrics
+      port: 9091
+      targetPort: 9091

base/storage/seaweedfs-master.yaml

@@ -23,6 +23,7 @@ spec:
             - -mdir=/data
             - -defaultReplication=000
             - -volumeSizeLimitMB=1000
+            - -metricsPort=9091
           ports:
             - name: http
               containerPort: 9333
@@ -30,6 +31,9 @@ spec:
             - name: grpc
               containerPort: 19333
               protocol: TCP
+            - name: metrics
+              containerPort: 9091
+              protocol: TCP
           volumeMounts:
             - name: data
               mountPath: /data
@@ -53,6 +57,8 @@ kind: Service
 metadata:
   name: seaweedfs-master
   namespace: storage
+  labels:
+    app: seaweedfs-master
 spec:
   selector:
     app: seaweedfs-master
@@ -64,3 +70,6 @@ spec:
     - name: grpc
       port: 19333
       targetPort: 19333
+    - name: metrics
+      port: 9091
+      targetPort: 9091

base/storage/seaweedfs-servicemonitor.yaml

@@ -0,0 +1,21 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: seaweedfs
+  namespace: storage
+  labels:
+    app: seaweedfs
+    release: kube-prometheus-stack
+spec:
+  selector:
+    matchExpressions:
+      - key: app
+        operator: In
+        values:
+          - seaweedfs-master
+          - seaweedfs-volume
+          - seaweedfs-filer
+  endpoints:
+    - port: metrics
+      interval: 30s
+      path: /metrics

base/storage/seaweedfs-volume.yaml

@@ -24,6 +24,7 @@ spec:
             - -mserver=seaweedfs-master.storage.svc.cluster.local:9333
             - -dir=/data
             - -max=50
+            - -metricsPort=9091
           ports:
             - name: http
               containerPort: 8080
@@ -31,6 +32,9 @@ spec:
             - name: grpc
               containerPort: 18080
               protocol: TCP
+            - name: metrics
+              containerPort: 9091
+              protocol: TCP
           volumeMounts:
             - name: data
               mountPath: /data
@@ -54,6 +58,8 @@ kind: Service
 metadata:
   name: seaweedfs-volume
   namespace: storage
+  labels:
+    app: seaweedfs-volume
 spec:
   selector:
     app: seaweedfs-volume
@@ -65,3 +71,6 @@ spec:
     - name: grpc
       port: 18080
       targetPort: 18080
+    - name: metrics
+      port: 9091
+      targetPort: 9091