add scrape config for tuya bridge and prohibit access to the metrics path via ingress [ci skip]

modules/kubernetes/monitoring/prometheus_chart_values.tpl

@@ -440,3 +440,14 @@ extraScrapeConfigs: |
         action: replace
         regex: '(.*)'
         replacement: 'registry_$${1}' 
+  - job_name: 'automatic-transfer-switch'
+    static_configs:
+        - targets:
+          - "tuya-bridge.tuya-bridge.svc.cluster.local:80" # devvm
+    metrics_path: '/metrics'
+    metric_relabel_configs:
+      - source_labels: [ __name__ ]
+        target_label: '__name__'
+        action: replace
+        regex: '(.*)'
+        replacement: 'automatic_transfer_switch_$${1}'

modules/kubernetes/tuya-bridge/main.tf

@@ -41,7 +41,7 @@ resource "kubernetes_deployment" "tuya-bridge" {
       }
       spec {
         container {
-          image = "viktorbarzin/tuya_bridge"
+          image = "viktorbarzin/tuya_bridge:latest"
           name  = "tuya-bridge"
           port {
             container_port = 8080
@@ -90,4 +90,13 @@ module "ingress" {
   namespace       = "tuya-bridge"
   name            = "tuya-bridge"
   tls_secret_name = var.tls_secret_name
+
+  extra_annotations = {
+    "nginx.ingress.kubernetes.io/server-snippet" : <<-EOF
+      location /metrics {
+        deny all;
+        return 403;
+      }
+      EOF
+  }
 }