Merge pull request #556 from stlaz/metrics_client_cert

Bug 1986829: metrics: use client cert auth for metrics scraping
openshift · Aug 2, 2021 · 7766edf · 7766edf
2 parents 9e0bdb0 + 2a6ec28
commit 7766edf
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml b/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml
@@ -21,6 +21,8 @@ spec:
     tlsConfig:
       caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
       serverName: metrics.openshift-kube-controller-manager-operator.svc
+      certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
+      keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
   jobLabel: component
   namespaceSelector:
     matchNames:

diff --git a/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml b/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml
@@ -70,6 +70,8 @@ spec:
     tlsConfig:
       caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
       serverName: kube-controller-manager.openshift-kube-controller-manager.svc
+      certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
+      keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
   namespaceSelector:
     matchNames:
     - openshift-kube-controller-manager