Merge pull request #364 from stlaz/metrics_client_cert

Bug 1986829: metrics: use client cert auth for metrics scraping
openshift · Jul 31, 2021 · f1812bc · f1812bc
2 parents 8507529 + 4ce7ecd
commit f1812bc
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/manifests/0000_90_kube-scheduler-operator_03_servicemonitor.yaml b/manifests/0000_90_kube-scheduler-operator_03_servicemonitor.yaml
@@ -21,6 +21,8 @@ spec:
     tlsConfig:
       caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
       serverName: metrics.openshift-kube-scheduler-operator.svc
+      certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
+      keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
   jobLabel: component
   namespaceSelector:
     matchNames:

diff --git a/manifests/0000_90_kube-scheduler-operator_04_servicemonitor-scheduler.yaml b/manifests/0000_90_kube-scheduler-operator_04_servicemonitor-scheduler.yaml
@@ -94,6 +94,8 @@ spec:
     tlsConfig:
       caFile: /etc/prometheus/configmaps/serving-certs-ca-bundle/service-ca.crt
       serverName: scheduler.openshift-kube-scheduler.svc
+      certFile: /etc/prometheus/secrets/metrics-client-certs/tls.crt
+      keyFile: /etc/prometheus/secrets/metrics-client-certs/tls.key
   namespaceSelector:
     matchNames:
     - openshift-kube-scheduler