Deploy standalone mongodb exporter by muzammil360 · Pull Request #931 · mojaloop/iac-modules

muzammil360 · 2026-02-11T08:11:47Z

This pull request introduces support for monitoring MongoDB resources in the infrastructure, automating the deployment of MongoDB exporters, services, and ServiceMonitors, and integrating a new Grafana dashboard for MongoDB. The changes ensure that MongoDB metrics are collected and visualized alongside existing MySQL monitoring, and update the configuration and templates accordingly.

MongoDB Monitoring Integration

Added a new Terraform local and resource to identify and process MongoDB resources for monitoring (monolith_mongodb_resources_to_monitor) and to generate corresponding monitoring manifests. [1] [2] [3]
Created a new template (monolith-mongodb-monitoring.yaml.tpl) that defines a Deployment for the MongoDB exporter, a Service for metrics exposure, and a ServiceMonitor for Prometheus scraping.
Updated the kustomization template to include the generated MongoDB monitoring YAML files, ensuring they are applied during deployment.

Grafana Dashboard Updates

Switched the MongoDB Grafana dashboard to use a new ID and revision, and updated the dashboard manifest to specify the required Prometheus datasource. [1] [2]
Re-enabled the MongoDB Grafana dashboard in the monitoring configuration, replacing previously commented-out, non-functional definitions with a working one.

Copilot

Pull request overview

Adds MongoDB DBaaS monitoring support in the monolith environment by generating Kubernetes manifests (exporter Deployment/Service/ServiceMonitor) via Terraform and enabling a MongoDB Grafana dashboard, mirroring the existing MySQL monitoring approach.

Changes:

Extend the stateful-resources Kustomize template to include generated MongoDB monitoring manifests.
Add Terraform generation of per-MongoDB monitoring manifests using a new monolith-mongodb-monitoring.yaml.tpl template.
Enable a MongoDB Grafana dashboard by switching to a new grafana.com dashboard ID/revision in both the template and rendered GitOps manifest.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
terraform/gitops/stateful-resources/templates/stateful-resources/stateful-resources-kustomization.yaml.tpl	Includes generated MongoDB monitoring YAMLs in the kustomization resources list.
terraform/gitops/stateful-resources/templates/stateful-resources/monolith-mongodb-monitoring.yaml.tpl	New template defining Deployment/Service/ServiceMonitor for `mongodb_exporter`.
terraform/gitops/stateful-resources/stateful-resources-config.tf	Wires new locals and a `local_file` generator for MongoDB monitoring manifests.
terraform/gitops/generate-files/templates/monitoring/post-config/dashboards/default.yaml.tpl	Enables a MongoDB GrafanaDashboard (grafana.com import).
gitops/applications/base/monitoring-post-config/dashboards-default.yaml	Updates the rendered dashboard ID/revision for MongoDB.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-26T10:03:59Z

+        db_secret_key                = "MONGODB_CLUSTER_ADMIN_PASSWORD" 
+        db_username_key              = "MONGODB_CLUSTER_ADMIN_USER"


db_secret_key/db_username_key are hardcoded to MONGODB_CLUSTER_ADMIN_PASSWORD/MONGODB_CLUSTER_ADMIN_USER, but the monolith DB definitions use external_resource_config.master_user_password_secret_key (e.g. MONGODB_USER_ADMIN_PASSWORD). This will make the generated exporter Deployment reference non-existent secret keys for DBaaS/monolith resources. Prefer wiring db_secret_key to each.value.external_resource_config.master_user_password_secret_key and take the username from each.value.external_resource_config.username (or ensure the referenced secret actually contains the admin user/password keys).

Suggested change

db_secret_key = "MONGODB_CLUSTER_ADMIN_PASSWORD"

db_username_key = "MONGODB_CLUSTER_ADMIN_USER"

db_secret_key = each.value.external_resource_config.master_user_password_secret_key

Copilot · 2026-02-26T10:04:00Z

+        - --mongodb.uri=mongodb://$(MONGODB_USERNAME):$(MONGODB_PASSWORD)@${externalservice_name}.${namespace}:${port}/admin?replicaSet=rs0&tlsInsecure=true&ssl=true
+        - --mongodb.direct-connect=true
+        - --compatible-mode
+        - --collect-all
+        - --log.level=info
+        ports:
+        - name: metrics
+          containerPort: 9216
+        env:
+        - name: MONGODB_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: ${db_secret}
+              key: ${db_username_key}
+        - name: MONGODB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: ${db_secret}
+              key: ${db_secret_key}


The exporter URI builds the username from $(MONGODB_USERNAME) sourced from ${db_secret} using ${db_username_key}. For monolith DB configs, only the password key is currently provided (master_user_password_secret_key), so this is likely to fail due to a missing username key in the secret. Consider using the ${db_username} template var directly in the URI and only source the password from the secret (or ensure the secret contains the referenced username key).

Copilot · 2026-02-26T10:04:00Z

+        - --mongodb.uri=mongodb://$(MONGODB_USERNAME):$(MONGODB_PASSWORD)@${externalservice_name}.${namespace}:${port}/admin?replicaSet=rs0&tlsInsecure=true&ssl=true
+        - --mongodb.direct-connect=true
+        - --compatible-mode
+        - --collect-all
+        - --log.level=info
+        ports:
+        - name: metrics
+          containerPort: 9216
+        env:
+        - name: MONGODB_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: ${db_secret}
+              key: ${db_username_key}
+        - name: MONGODB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: ${db_secret}
+              key: ${db_secret_key}
+        volumeMounts:
+        - name: ca-bundle-volume
+          mountPath: /etc/mongodb-certs
+          readOnly: true


A CA bundle secret is mounted at /etc/mongodb-certs, but the connection string enables tlsInsecure=true and does not reference the mounted CA file. This effectively disables TLS verification and makes the CA mount unused. Prefer configuring the MongoDB client to use the mounted CA (e.g., tls=true + CA file option) and drop tlsInsecure=true so traffic is verified.

…itor

…c-modules into muz/mongodb-exporter

KhaledSaiidi

lgtm

muzammil360 requested review from PaulGregoryBaker, bushjames, dfry, elnyry-sam-k, kalinkrustev, shashi165, sijo5722-2021 and vijayg10 as code owners February 11, 2026 08:11

muzammil360 changed the base branch from main to feature/storage-cluster February 11, 2026 08:12

muzammil360 marked this pull request as draft February 11, 2026 09:35

muzammil360 force-pushed the muz/mongodb-exporter branch 2 times, most recently from fdeb1cc to 6b89ed6 Compare February 21, 2026 09:44

muzammil360 requested a review from Copilot February 26, 2026 09:59

Copilot started reviewing on behalf of muzammil360 February 26, 2026 10:00 View session

Copilot AI reviewed Feb 26, 2026

View reviewed changes

muzammil360 force-pushed the muz/mongodb-exporter branch from 36d394a to 7d2f0f8 Compare February 27, 2026 11:48

muzammil360 added 14 commits March 2, 2026 08:51

added mongodb exporter configs

063e71f

fix creds issue

ff1470b

fix creds issue with admin user

0943b3f

fix creds issue with monitor user

b7bf8b3

fix creds issue with percona

43b7837

making it percona compatible

8e7c3a8

added TLS config

8f5f1c9

added monogdb endpoint

0887eee

reverting to original

9510a89

added more args to exporter

5b4874b

switched to admin user

7533f2b

fixed args issue

b5376c7

fix creds issue

1113316

fix creds issue with admin user

d39d15f

muzammil360 added 19 commits March 31, 2026 10:41

fix creds issue with admin user

ada3c98

fix creds issue with monitor user

3c71ea0

fix creds issue with percona

a5b14b0

making it percona compatible

e461396

added TLS config

216468b

added monogdb endpoint

5da2606

reverting to original

792bc08

added more args to exporter

d366dcf

switched to admin user

def73e8

fixed args issue

d4f97f2

use different mongodb dashboard

5f17931

add a comment to explain servicemonitor harcoding

dc24c18

update mongodb-exporter image version and refine URI parameters

b1328f2

update mongodb-exporter URI to use external service address

9ad713b

fix: correct syntax for mongodb-exporter URI in deployment configuration

18dc38a

feat: add Prometheus datasource configuration to mongodb dashboard

b1266c7

switched to cluster monitor user

70b85ce

added comment

7ab784e

fix: update mongodb-exporter URI to include TLS configuration options

ef47ad4

muzammil360 force-pushed the muz/mongodb-exporter branch from 989bb09 to ef47ad4 Compare March 31, 2026 05:42

muzammil360 added 8 commits March 31, 2026 15:18

update

e806cde

fix: update metric relabelings for environment variable in ServiceMon…

beb7025

…itor

fix: remove unused metric relabeling for instance in ServiceMonitor

017d1e0

Merge branch 'muz/mongodb-exporter' of https://github.com/mojaloop/ia…

a6c90f8

…c-modules into muz/mongodb-exporter

parametrize connection string

c0871fa

parametrize connection string 2

3ecac91

downgrade to 0.40

3f69f31

parametrize connection string

e8c41fd

muzammil360 marked this pull request as ready for review April 7, 2026 09:55

KhaledSaiidi approved these changes Apr 7, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deploy standalone mongodb exporter #931

Deploy standalone mongodb exporter #931
muzammil360 wants to merge 72 commits intofeature/storage-clusterfrom
muz/mongodb-exporter

muzammil360 commented Feb 11, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 26, 2026

Uh oh!

Uh oh!

Copilot AI Feb 26, 2026

Uh oh!

Copilot AI Feb 26, 2026

Uh oh!

Uh oh!

Uh oh!

KhaledSaiidi left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		db_secret_key = "MONGODB_CLUSTER_ADMIN_PASSWORD"
		db_username_key = "MONGODB_CLUSTER_ADMIN_USER"

	db_secret_key = "MONGODB_CLUSTER_ADMIN_PASSWORD"
	db_username_key = "MONGODB_CLUSTER_ADMIN_USER"
	db_secret_key = each.value.external_resource_config.master_user_password_secret_key

Conversation

muzammil360 commented Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI Feb 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 26, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

KhaledSaiidi left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

muzammil360 commented Feb 11, 2026 •

edited

Loading