apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: openbao
  namespace: data
  labels:
    release: kube-prometheus-stack
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: openbao
      app.kubernetes.io/instance: openbao
    matchExpressions:
      - key: openbao-internal
        operator: DoesNotExist
  endpoints:
    - port: http
      interval: 30s
      path: /v1/sys/metrics
      params:
        format: ["prometheus"]
      authorization:
        type: Bearer
        credentials:
          name: openbao-keys
          key: root-token