I have done similar setup with spicedb operator as well, it works well. When you create the service monitor for the spicedb service, you use the name of the CR as selector.