fix(natsexporter): Finalize MR

helmfile/apps/nubus/helmfile-child.yaml.gotmpl

@@ -36,6 +36,14 @@ repositories:
     password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
     oci: true
     url: "{{ coalesce .Values.repositories.helm.registryOpencodeDe .Values.global.helmRegistry | default .Values.charts.nginxS3Gateway.registry }}/{{ .Values.charts.nginxS3Gateway.repository }}"
+  # prometheus-nats-exporter chart
+  - name: "prometheus-nats-exporter-repo"
+    # keyring: "no_verification"
+    verify: {{ .Values.charts.prometheusNatsExporter.verify }}
+    username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
+    password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
+    oci: true
+    url: "{{ coalesce .Values.repositories.helm.registryOpencodeDe .Values.global.helmRegistry | default .Values.charts.prometheusNatsExporter.registry }}/{{ .Values.charts.prometheusNatsExporter.repository }}"
 
 releases:
   # Univention Management Stack Umbrella Chart
@@ -86,6 +94,18 @@ releases:
     installed: {{ .Values.apps.nubus.enabled }}
     timeout: 900
 
+  # prometheus-nats-exporter
+  - name: "prometheus-nats-exporter"
+    chart: "prometheus-nats-exporter-repo/{{ .Values.charts.prometheusNatsExporter.name }}"
+    version: "{{ .Values.charts.prometheusNatsExporter.version }}"
+    values:
+      - "values-prometheus-nats-exporter.yaml.gotmpl"
+      {{- range .Values.customization.release.prometheusNatsExporter }}
+      - {{ . }}
+      {{- end }}
+    installed: {{ eq .Values.monitoring.prometheus.exporters.overrides.nats nil | ternary .Values.monitoring.prometheus.exporters.global .Values.monitoring.prometheus.exporters.overrides.nats }}
+    timeout: 900
+
 commonLabels:
   deployStage: "050-components"
   component: "nubus"

helmfile/apps/nubus/values-prometheus-nats-exporter.yaml.gotmpl

@@ -0,0 +1,25 @@
+# SPDX-FileCopyrightText: 2025 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
+# SPDX-License-Identifier: Apache-2.0
+---
+image:
+  repository: {{ coalesce .Values.repositories.image.registryOpencodeDeEnterprise .Values.global.imageRegistry .Values.images.prometheusNatsExporter.registry }}/{{ .Values.images.prometheusNatsExporter.repository }}
+  tag: {{ .Values.images.prometheusNatsExporter.tag }}
+  pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
+  imagePullSecrets:
+    {{- range .Values.global.imagePullSecrets }}
+    - name: {{ . | quote }}
+    {{- end }}
+
+serviceMonitor:
+  enabled: {{ .Values.monitoring.prometheus.serviceMonitors.enabled }}
+  additionalLabels:
+    {{ .Values.monitoring.prometheus.serviceMonitors.labels | toYaml | nindent 4 }}
+
+resources:
+  {{ .Values.resources.prometheusNatsExporter | toYaml | nindent 2 }}
+
+config:
+  nats:
+    service: ums-provisioning-nats
+    namespace: {{ .Release.Namespace }}
+    port: 8222

helmfile/environments/default/charts.yaml.gotmpl

@@ -441,6 +441,16 @@ charts:
     name: "postgresql"
     version: "2.1.2"
     verify: true
+  prometheusNatsExporter:
+    # providerCategory: "Community"
+    # providerResponsible: "openDesk"
+    # upstreamRegistry: "https://ghcr.io"
+    # upstreamRepository: "prometheus-community/charts"
+    registry: "ghcr.io"
+    repository: "prometheus-community/charts"
+    name: "prometheus-nats-exporter"
+    version: "2.20.0"
+    verify: false
   redis:
     # providerCategory: "Community"
     # providerResponsible: "openDesk"

helmfile/environments/default/customization.yaml.gotmpl

@@ -56,6 +56,7 @@ customization:
     intercomService: {}
     opendeskKeycloakBootstrap: {}
     nginxS3Gateway: {}
+    prometheusNatsExporter: {}
     # open-xchange
     dovecot: {}
     openxchange: {}

helmfile/environments/default/images.yaml.gotmpl

@@ -921,6 +921,14 @@ images:
     registry: "registry-1.docker.io"
     repository: "library/postgres"
     tag: "15.13-alpine3.20@sha256:f7de0e2497b9a3b027d41377606f94bb0140a034ed303f6de690aa77637bfbc9"
+  prometheusNatsExporter:
+    # providerCategory: "Community"
+    # providerResponsible: "openDesk"
+    # upstreamRegistry: "https://registry-1.docker.io"
+    # upstreamRepository: "natsio/prometheus-nats-exporter"
+    registry: "docker.io"
+    repository: "natsio/prometheus-nats-exporter"
+    tag: "0.17.3@sha256:26c826662ac8424597cc9bdf89ea5b606eb66e3c11db9b1215c27d2076bbb01b"
   prosody:
     # providerCategory: "Supplier"
     # providerResponsible: "Nordeck"

helmfile/environments/default/monitoring.yaml.gotmpl

@@ -17,6 +17,15 @@ monitoring:
       labels:
         release: "kube-prometheus-stack"
 
+    # Prometheus exporter deployment toggles for openDesk
+    exporters:
+      # Global switch for all optional exporters
+      global: false
+      # Per-exporter overrides (take precedence over "global")
+      overrides:
+        # prometheus-nats-exporter
+        nats: ~
+
   grafana:
     dashboards:
       enabled: false

helmfile/environments/default/resources.yaml.gotmpl

@@ -437,6 +437,13 @@ resources:
     requests:
       cpu: 0.1
       memory: "256Mi"
+  prometheusNatsExporter:
+    limits:
+      cpu: 99
+      memory: "128Mi"
+    requests:
+      cpu: 100m
+      memory: "128Mi"
   prosody:
     limits:
       cpu: 99