Built-in Prometheus and Grafana monitoring on Kubernetes

Kubernetes installs now ship Prometheus and Grafana in the chart, on by default, matching the Docker Compose monitoring stack. You get a Kubernetes-adapted scrape config for the gateway’s metrics, the provisioned datasource, and the Overview and Service-Status dashboards, with persistent volumes retained across upgrades. Network access is default-deny, opened only for scraping and the gateway’s own status probes.

The Grafana admin login is auto-generated into a managed secret rather than a hardcoded default. Grafana stays cluster-internal by default; set the service type to NodePort to expose it on port 30302.

No action required for managed tenants. Self-hosted operators can disable monitoring or expose Grafana as needed.