MON-4163: Allow whitelisting KSM metrics

Whitelist `kube_namespace_created`, but block others as earlier. This is
possible owing to the recent lookarounds support merged in KSM [1].

[1]: kubernetes/kube-state-metrics#2616

Signed-off-by: Pranshu Srivastava <[email protected]>

Author: rexagod

CHANGELOG.md

@@ -3,6 +3,7 @@
 ## 4.20
 
 - [#2595](https://github.com/openshift/cluster-monitoring-operator/pull/2595) Multi-tenant support for KSM's CRS feature-set downstream.
+- [#2625](https://github.com/openshift/cluster-monitoring-operator/pull/2625) Support lookarounds in KSM's deny-list and white-list `kube_namespace_created`.
 
 ## 4.18
 

assets/kube-state-metrics/deployment.yaml

@@ -46,7 +46,7 @@ spec:
         - --metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]
         - |
           --metric-denylist=
-          ^kube_.+_created$,
+          ^kube_(?=namespace).*_created$,
           ^kube_.+_metadata_resource_version$,
           ^kube_replicaset_metadata_generation$,
           ^kube_replicaset_status_observed_generation$,

jsonnet/main.jsonnet

@@ -432,7 +432,21 @@ local inCluster =
     openshiftStateMetrics: openshiftStateMetrics($.values.openshiftStateMetrics),
   } +
   (import './utils/anti-affinity.libsonnet') +
-  (import 'github.com/prometheus-operator/kube-prometheus/jsonnet/kube-prometheus/addons/ksm-lite.libsonnet') +
+  (import 'github.com/prometheus-operator/kube-prometheus/jsonnet/kube-prometheus/addons/ksm-lite.libsonnet') {
+    denylist: [
+      '^kube_(?=namespace).*_created$',
+      '^kube_.+_metadata_resource_version$',
+      '^kube_replicaset_metadata_generation$',
+      '^kube_replicaset_status_observed_generation$',
+      '^kube_pod_restart_policy$',
+      '^kube_pod_init_container_status_terminated$',
+      '^kube_pod_init_container_status_running$',
+      '^kube_pod_container_status_terminated$',
+      '^kube_pod_container_status_running$',
+      '^kube_pod_completion_time$',
+      '^kube_pod_status_scheduled$',
+    ],
+  } +
   (import './utils/ibm-cloud-managed-profile.libsonnet') +
   (import './components/metrics-server-audit.libsonnet') +
   {};  // Including empty object to simplify adding and removing imports during development