apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: <service-monitor-name>
  namespace: <namespace>
spec:
  endpoints:
  - port: <target-port>
    scheme: https
    tlsConfig:
      caFile: /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
      certFile: /path/to/tls/certfile
      keyFile: /path/to/tls/keyfile
  selector:
    matchLabels:
      <your-selector-label>: <your-selector-value>