From 2a6ec28f5637cbf370db12a35ded1ceb4ede36b7 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Thu, 29 Jul 2021 10:57:45 +0200 Subject: [PATCH] metrics: use client cert auth for metrics scraping --- ...0_90_kube-controller-manager-operator_03_servicemonitor.yaml | 2 ++ ...r-manager-operator_04_servicemonitor-controller-manager.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml b/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml index 1d658ab57..c3690a455 100644 --- a/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml +++ b/manifests/0000_90_kube-controller-manager-operator_03_servicemonitor.yaml @@ -21,6 +21,8 @@ spec: tlsConfig: caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt serverName: metrics.openshift-kube-controller-manager-operator.svc + certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt + keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key jobLabel: component namespaceSelector: matchNames: diff --git a/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml b/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml index 63eb8b72f..8ff3551b7 100644 --- a/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml +++ b/manifests/0000_90_kube-controller-manager-operator_04_servicemonitor-controller-manager.yaml @@ -70,6 +70,8 @@ spec: tlsConfig: caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt serverName: kube-controller-manager.openshift-kube-controller-manager.svc + certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt + keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key namespaceSelector: matchNames: - openshift-kube-controller-manager