add metrics service to tls cert

Author: maltesander

rust/operator-binary/src/hbase_controller.rs

@@ -1092,6 +1092,7 @@ fn build_rolegroup_statefulset(
     if hbase.has_kerberos_enabled() {
         add_kerberos_pod_config(
             hbase,
+            rolegroup_ref,
             &mut hbase_container,
             &mut pod_builder,
             merged_config

rust/operator-binary/src/kerberos.rs

@@ -11,6 +11,7 @@ use stackable_operator::{
         },
     },
     kube::{ResourceExt, runtime::reflector::ObjectRef},
+    role_utils::RoleGroupRef,
     shared::time::Duration,
     utils::cluster_info::KubernetesClusterInfo,
 };
@@ -230,6 +231,7 @@ pub fn kerberos_ssl_client_settings(hbase: &v1alpha1::HbaseCluster) -> BTreeMap<
 
 pub fn add_kerberos_pod_config(
     hbase: &v1alpha1::HbaseCluster,
+    rolegroup_ref: &RoleGroupRef<v1alpha1::HbaseCluster>,
     cb: &mut ContainerBuilder,
     pb: &mut PodBuilder,
     requested_secret_lifetime: Duration,
@@ -264,6 +266,8 @@ pub fn add_kerberos_pod_config(
                     SecretOperatorVolumeSourceBuilder::new(https_secret_class)
                         .with_pod_scope()
                         .with_node_scope()
+                        // We need to add the metrics service for scraping
+                        .with_service_scope(rolegroup_ref.rolegroup_metrics_service_name())
                         .with_format(SecretFormat::TlsPkcs12)
                         .with_tls_pkcs12_password(TLS_STORE_PASSWORD)
                         .with_auto_tls_cert_lifetime(requested_secret_lifetime)