initial version for Talos metric scraping How To

[Hr46ph]

Pull Request

What? (description)

Added new file website/content/v1.10/talos-guides/howto/monitoring.md as requested here:
#7214 (comment)

Why? (reasoning)

The steps will help the community to succesfully monitor Talos Linux Kubernetes parts.

Acceptance

Please use the following checklist:

• you linked an issue (if applicable)
• you included tests (if applicable)
• you ran conformance (make conformance)
• you formatted your code (make fmt)
• you linted your code (make lint)
• you generated documentation (make docs)
• you ran unit-tests (make unit-tests)

See make help for a description of the available targets.

[smira]

I would say probably it might be easier to listen for metrics on a separate non-https url, e.g. http://0.0.0.0:10003 (whatever port), so that drops the requirement to extract etcd certs and put them into the cluster (which I think a security risk on its own).

Instead, the port can be blocked from the outside via https://www.talos.dev/v1.9/talos-guides/network/ingress-firewall/

[Hr46ph]

Ah thats interesting and indeed an easier / better way! Thanks, I will give that a try and update the how to.