[kube-prometheus-stack] Externalsecrets options for additionalScrapeConfig.

[ravinx]

Is your feature request related to a problem ?

I wanted to pull confluentcloud metrics in Prometheus with the additonalScrapeConfig in kube-prometheus-stack helm chart. I did the configuration through additonalScrapeConfig. I am not able to pull the secrets for username and password from azure vault for confluentcloud. I didn't see any option to pull the secrets directly from any secret store into the chart.

Describe the solution you'd like.

I would like to have an option to pull the secrets from an externalsecret store which can be anything(example: azure vault, aws KMS etc.)

Describe alternatives you've considered.

NONE

Additional context.

The config passed to the prometheus.prometheusSpec.additionalScrapeConfigs
`scrape_configs:

• job_name: Confluent Cloud
  scrape_interval: 1m
  scrape_timeout: 1m
  honor_timestamps: true
  static_configs:
  • targets:
    • api.telemetry.confluent.cloud
      scheme: https
      basic_auth:
      username:
      password:
      metrics_path: /v2/metrics/cloud/export
      params:
      "resource.kafka.id":
      `