docs(ha-k8s): ServiceMonitor TLS for direct scraping

[vpavicic]

Release note

Documents prometheus.serviceMonitor.scheme and prometheus.serviceMonitor.tlsConfig on the HA Kubernetes page, so Prometheus scrapes Memgraph's OpenMetrics endpoint over HTTPS when Bolt TLS is enabled. Adds the scheme to the direct-scraping checklist and values example, a ServiceMonitor TLS section, and the two configuration-table rows.

Corrects the existing-Gateway warning, which still listed one coordinator-{id}-bolt listener per coordinator. Coordinators share a single coordinators-bolt listener on ports.boltPort.

The ServiceMonitor TLS section is the part of #1749 that never reached main. That pull request was opened for it, then force-pushed down to the direct-scraping checklist, which landed with the 3.13 release.

Related product PRs

memgraph/helm-charts#286

Checklist:

• Add appropriate milestone (current release cycle)
• Add bugfix or feature label, based on the product PR type you're documenting
• Make sure all relevant tech details are documented
  • Update reference pages (configuration options table on the HA k8s page)
  • Search for the feature you are working on (mentions) and make updates if needed
  • Provide a basic example of usage
  • In case your feature is an Enterprise one, list it under ME page and mark its page with Enterprise
• Check all content with Grammarly
• Perform a self-review of my code
• The build passes locally
• My changes generate no new warnings or errors

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
documentation	Ready	Preview	Oct 7, 2026 2:22pm UTC