[occm] Fix serviceMonitor labelSelector and remove deprecated bearerTokenFile auth

charts/openstack-cloud-controller-manager/Chart.yaml

@@ -4,7 +4,7 @@ description: Openstack Cloud Controller Manager Helm Chart
 icon: https://object-storage-ca-ymq-1.vexxhost.net/swift/v1/6e4619c416ff4bd19e1c087f27a43eea/www-images-prod/openstack-logo/OpenStack-Logo-Vertical.png
 home: https://github.com/kubernetes/cloud-provider-openstack
 name: openstack-cloud-controller-manager
-version: 2.36.2
+version: 2.36.3
 maintainers:
   - name: eumel8
     email: f.kloeker@telekom.de

charts/openstack-cloud-controller-manager/templates/daemonset.yaml

@@ -59,6 +59,7 @@ spec:
             - --use-service-account-credentials=false
             - --controllers={{- trimAll "," (include "occm.enabledControllers" . ) -}}
             {{- if .Values.serviceMonitor.enabled }}
+            - --authorization-always-allow-paths=/metrics
             - --bind-address=0.0.0.0
             {{- else }}
             - --bind-address=127.0.0.1

charts/openstack-cloud-controller-manager/templates/servicemonitor.yaml

@@ -15,14 +15,13 @@ metadata:
     {{- end }}
 spec:
   endpoints:
-  - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
-    interval: 30s
+  - interval: 30s
     port: http
     scheme: https
     tlsConfig:
       insecureSkipVerify: true
   jobLabel: component
   selector:
     matchLabels:
-      {{- include "occm.controllermanager.matchLabels" . | nindent 6 }}
+      {{- include "common.labels.standard" . | nindent 6 }}
 {{- end }}