Add support for secret refs via a secret manager #572

TheSpiritXIII · 2024-02-02T14:21:18Z

Part 2 for secret provider support within common. See: https://groups.google.com/g/prometheus-developers/c/WKOej_pnhXg

Part 1 is here: #538

bwplotka

Amazing! Generally LGTM, but lots of minor suggestions.

Disclaimer: @TheSpiritXIII is in my Google team. I tried to get more hands on this review for weeks, but no response. The secret provider feature was generally accepted 1, 2, so allowing myself to move forward after the careful review

config/http_config.go

bwplotka

LGTM, just some nits and one potentially blocking item (did you meant to make TLSConfigOption withSecretManager private?)

config/http_config.go

bwplotka · 2024-05-14T17:37:51Z

config/http_config.go

+type TLSConfigOption func(options *tlsConfigOptions)
+
+// WithSecretManager allows setting the secret manager.
+func withSecretManager(manager SecretManager) TLSConfigOption {


Shouldn't this be:

Suggested change

func withSecretManager(manager SecretManager) TLSConfigOption {

func WithSecretManagerTLSConfigOption(manager SecretManager) TLSConfigOption {

(for dedup and to be exported)?

We can do this with a common object that implements both interfaces. What do you think of the new solution?

Whatever is simpler here

config/http_config.go

bwplotka · 2024-05-14T17:42:49Z

config/http_config.go

+		if !rt.clientSecret.immutable() {
+			rt.mtx.RLock()
+			changed = secret != rt.lastSecret
+			rt.mtx.RUnlock()
+		}
 	}
-	rt.mtx.RLock()
-	changed = secret != rt.secret
-	rt.mtx.RUnlock()

 	if changed || rt.rt == nil {


Would it be harmful if we kill this if (827 line) and do the changed = ... even on rt.rt == nil case? Bit simpler code and then we can remove the || rt.rt == nil part from if 879 (also simpler). WDYT?

Is this what you mean?

Signed-off-by: Daniel Hrabovcak <thespiritxiii@gmail.com>

bwplotka · 2024-05-15T11:59:33Z

config/http_config.go

-		if err != nil {
-			return nil, fmt.Errorf("unable to read oauth2 client secret: %w", err)
+	// Fetch the secret if it's our first run or always if the secret can change.
+	if rt.rt == nil || (rt.clientSecret != nil && !rt.clientSecret.immutable()) {


This not ended up better (or worse) after my suggestions -- might be my misunderstanding, so I ended up prototyping how it might look, proposed in TheSpiritXIII#1

I also fixed a small race with reading rt.rt 🤔I think this race was before too.

No regression and I only fix that & refactor in my PR, so let's merge this one and review my PR if there is a need (

common/config/http_config.go

Line 759 in 58f58f8

if changed || rt.rt == nil {

)

bwplotka

Let's merge! thanks!

bwplotka · 2024-05-15T13:33:07Z

config/http_config.go

-		if err != nil {
-			return nil, fmt.Errorf("unable to read oauth2 client secret: %w", err)
+	// Fetch the secret if it's our first run or always if the secret can change.
+	if rt.rt == nil || (rt.clientSecret != nil && !rt.clientSecret.immutable()) {


No regression and I only fix that & refactor in my PR, so let's merge this one and review my PR if there is a need (

common/config/http_config.go

Line 759 in 58f58f8

if changed || rt.rt == nil {

)

…5472) [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/prometheus/common](https://togithub.com/prometheus/common) | `v0.53.0` -> `v0.54.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>prometheus/common (github.com/prometheus/common)</summary> ### [`v0.54.0`](https://togithub.com/prometheus/common/releases/tag/v0.54.0) [Compare Source](https://togithub.com/prometheus/common/compare/v0.53.0...v0.54.0) #### What's Changed - Bump golang.org/x/net from 0.22.0 to 0.23.0 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#624 - Bump golang.org/x/net from 0.22.0 to 0.23.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#623 - Add HTTP headers support to common HTTP client. by [@roidelapluie](https://togithub.com/roidelapluie) in [prometheus/common#416 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#633 - Bump github.com/aws/aws-sdk-go from 1.51.11 to 1.51.32 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#632 - Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#628 - Bump golang.org/x/net from 0.23.0 to 0.24.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#630 - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#631 - Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#629 - Use common interface to fetch secrets in HTTP client config by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#538 - Add support for secret refs via a secret manager by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#572 - oauth2RoundTripper: Avoid race condition and readability changes. by [@bwplotka](https://togithub.com/bwplotka) in [prometheus/common#634 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#636 - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.53.14 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#638 - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#639 - feat: add time template helpers by [@freak12techno](https://togithub.com/freak12techno) in [prometheus/common#627 #### New Contributors - [@bwplotka](https://togithub.com/bwplotka) made their first contribution in [prometheus/common#634 - [@freak12techno](https://togithub.com/freak12techno) made their first contribution in [prometheus/common#627 **Full Changelog**: prometheus/common@v0.53.0...v0.54.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/open-telemetry/opentelemetry-go).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…5709) [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/prometheus/common](https://togithub.com/prometheus/common) | `v0.53.0` -> `v0.54.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>prometheus/common (github.com/prometheus/common)</summary> ### [`v0.54.0`](https://togithub.com/prometheus/common/releases/tag/v0.54.0) [Compare Source](https://togithub.com/prometheus/common/compare/v0.53.0...v0.54.0) #### What's Changed - Bump golang.org/x/net from 0.22.0 to 0.23.0 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#624 - Bump golang.org/x/net from 0.22.0 to 0.23.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#623 - Add HTTP headers support to common HTTP client. by [@roidelapluie](https://togithub.com/roidelapluie) in [prometheus/common#416 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#633 - Bump github.com/aws/aws-sdk-go from 1.51.11 to 1.51.32 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#632 - Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#628 - Bump golang.org/x/net from 0.23.0 to 0.24.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#630 - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#631 - Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#629 - Use common interface to fetch secrets in HTTP client config by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#538 - Add support for secret refs via a secret manager by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#572 - oauth2RoundTripper: Avoid race condition and readability changes. by [@bwplotka](https://togithub.com/bwplotka) in [prometheus/common#634 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#636 - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.53.14 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#638 - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#639 - feat: add time template helpers by [@freak12techno](https://togithub.com/freak12techno) in [prometheus/common#627 #### New Contributors - [@bwplotka](https://togithub.com/bwplotka) made their first contribution in [prometheus/common#634 - [@freak12techno](https://togithub.com/freak12techno) made their first contribution in [prometheus/common#627 **Full Changelog**: prometheus/common@v0.53.0...v0.54.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/open-telemetry/opentelemetry-go-contrib).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/prometheus/common](https://togithub.com/prometheus/common) | `v0.53.0` -> `v0.54.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>prometheus/common (github.com/prometheus/common)</summary> ### [`v0.54.0`](https://togithub.com/prometheus/common/releases/tag/v0.54.0) [Compare Source](https://togithub.com/prometheus/common/compare/v0.53.0...v0.54.0) #### What's Changed - Bump golang.org/x/net from 0.22.0 to 0.23.0 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#624 - Bump golang.org/x/net from 0.22.0 to 0.23.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#623 - Add HTTP headers support to common HTTP client. by [@roidelapluie](https://togithub.com/roidelapluie) in [prometheus/common#416 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#633 - Bump github.com/aws/aws-sdk-go from 1.51.11 to 1.51.32 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#632 - Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#628 - Bump golang.org/x/net from 0.23.0 to 0.24.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#630 - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#631 - Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#629 - Use common interface to fetch secrets in HTTP client config by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#538 - Add support for secret refs via a secret manager by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#572 - oauth2RoundTripper: Avoid race condition and readability changes. by [@bwplotka](https://togithub.com/bwplotka) in [prometheus/common#634 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#636 - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.53.14 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#638 - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#639 - feat: add time template helpers by [@freak12techno](https://togithub.com/freak12techno) in [prometheus/common#627 #### New Contributors - [@bwplotka](https://togithub.com/bwplotka) made their first contribution in [prometheus/common#634 - [@freak12techno](https://togithub.com/freak12techno) made their first contribution in [prometheus/common#627 **Full Changelog**: prometheus/common@v0.53.0...v0.54.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/open-telemetry/opentelemetry-collector).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: opentelemetrybot <107717825+opentelemetrybot@users.noreply.github.com>

) [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/prometheus/common](https://togithub.com/prometheus/common) | `v0.53.0` -> `v0.54.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fprometheus%2fcommon/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fcommon/v0.53.0/v0.54.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>prometheus/common (github.com/prometheus/common)</summary> ### [`v0.54.0`](https://togithub.com/prometheus/common/releases/tag/v0.54.0) [Compare Source](https://togithub.com/prometheus/common/compare/v0.53.0...v0.54.0) #### What's Changed - Bump golang.org/x/net from 0.22.0 to 0.23.0 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#624 - Bump golang.org/x/net from 0.22.0 to 0.23.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#623 - Add HTTP headers support to common HTTP client. by [@roidelapluie](https://togithub.com/roidelapluie) in [prometheus/common#416 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#633 - Bump github.com/aws/aws-sdk-go from 1.51.11 to 1.51.32 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#632 - Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#628 - Bump golang.org/x/net from 0.23.0 to 0.24.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#630 - Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#631 - Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#629 - Use common interface to fetch secrets in HTTP client config by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#538 - Add support for secret refs via a secret manager by [@TheSpiritXIII](https://togithub.com/TheSpiritXIII) in [prometheus/common#572 - oauth2RoundTripper: Avoid race condition and readability changes. by [@bwplotka](https://togithub.com/bwplotka) in [prometheus/common#634 - Synchronize common files from prometheus/prometheus by [@prombot](https://togithub.com/prombot) in [prometheus/common#636 - Bump github.com/aws/aws-sdk-go from 1.51.32 to 1.53.14 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#638 - Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 in /sigv4 by [@dependabot](https://togithub.com/dependabot) in [prometheus/common#639 - feat: add time template helpers by [@freak12techno](https://togithub.com/freak12techno) in [prometheus/common#627 #### New Contributors - [@bwplotka](https://togithub.com/bwplotka) made their first contribution in [prometheus/common#634 - [@freak12techno](https://togithub.com/freak12techno) made their first contribution in [prometheus/common#627 **Full Changelog**: prometheus/common@v0.53.0...v0.54.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/open-telemetry/opentelemetry-collector-contrib).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: opentelemetrybot <107717825+opentelemetrybot@users.noreply.github.com>

TheSpiritXIII changed the title ~~Use common interface to fetch secrets in HTTP client config~~ Add support for secret refs via a secret manager Feb 2, 2024

TheSpiritXIII mentioned this pull request Feb 2, 2024

Native Kubernetes secrets for authorization GoogleCloudPlatform/prometheus#130

Closed

TheSpiritXIII force-pushed the http-secret-ref branch from 106011c to 88d7263 Compare February 12, 2024 20:05

TheSpiritXIII mentioned this pull request Feb 12, 2024

Use common interface to fetch secrets in HTTP client config #538

Merged

TheSpiritXIII force-pushed the http-secret-ref branch from 88d7263 to 7fd0a65 Compare April 18, 2024 19:54

TheSpiritXIII marked this pull request as ready for review April 18, 2024 20:02

TheSpiritXIII mentioned this pull request Apr 18, 2024

Add secret provider interface under feature flag prometheus/prometheus#13955

Open

TheSpiritXIII force-pushed the http-secret-ref branch from 7fd0a65 to f3006cd Compare April 19, 2024 18:56

TheSpiritXIII force-pushed the http-secret-ref branch from f3006cd to 5033109 Compare May 9, 2024 13:29

bwplotka approved these changes May 9, 2024

View reviewed changes

bwplotka reviewed May 9, 2024

View reviewed changes

config/http_config.go Show resolved Hide resolved

TheSpiritXIII force-pushed the http-secret-ref branch 2 times, most recently from 1cfae07 to 6ff78c6 Compare May 14, 2024 16:23

TheSpiritXIII requested a review from bwplotka May 14, 2024 16:24

TheSpiritXIII force-pushed the http-secret-ref branch from 6ff78c6 to bdd4ba7 Compare May 14, 2024 17:40

bwplotka approved these changes May 14, 2024

View reviewed changes

TheSpiritXIII force-pushed the http-secret-ref branch from bdd4ba7 to 97ce796 Compare May 14, 2024 18:42

TheSpiritXIII requested a review from bwplotka May 14, 2024 18:45

Add support for secret refs

0e50973

Signed-off-by: Daniel Hrabovcak <thespiritxiii@gmail.com>

TheSpiritXIII force-pushed the http-secret-ref branch from 97ce796 to 0e50973 Compare May 14, 2024 18:49

bwplotka reviewed May 15, 2024

View reviewed changes

bwplotka approved these changes May 15, 2024

View reviewed changes

bwplotka merged commit a7407da into prometheus:main May 15, 2024
7 checks passed

This was referenced Jun 7, 2024

Expose secret as SecretReader and InlineSecret from config package #650

Merged

Update vendored mimir-prometheus grafana/mimir#8305

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add support for secret refs via a secret manager #572

Add support for secret refs via a secret manager #572

TheSpiritXIII commented Feb 2, 2024 •

edited

Loading

bwplotka left a comment •

edited

Loading

bwplotka left a comment

bwplotka May 14, 2024

TheSpiritXIII May 14, 2024

bwplotka May 15, 2024

bwplotka May 14, 2024

TheSpiritXIII May 14, 2024

bwplotka May 15, 2024

bwplotka May 15, 2024 •

edited

Loading

bwplotka left a comment

bwplotka May 15, 2024 •

edited

Loading

	func withSecretManager(manager SecretManager) TLSConfigOption {
	func WithSecretManagerTLSConfigOption(manager SecretManager) TLSConfigOption {

Add support for secret refs via a secret manager #572

Add support for secret refs via a secret manager #572

Conversation

TheSpiritXIII commented Feb 2, 2024 • edited Loading

bwplotka left a comment • edited Loading

Choose a reason for hiding this comment

bwplotka left a comment

Choose a reason for hiding this comment

bwplotka May 14, 2024

Choose a reason for hiding this comment

TheSpiritXIII May 14, 2024

Choose a reason for hiding this comment

bwplotka May 15, 2024

Choose a reason for hiding this comment

bwplotka May 14, 2024

Choose a reason for hiding this comment

TheSpiritXIII May 14, 2024

Choose a reason for hiding this comment

bwplotka May 15, 2024

Choose a reason for hiding this comment

bwplotka May 15, 2024 • edited Loading

Choose a reason for hiding this comment

bwplotka left a comment

Choose a reason for hiding this comment

bwplotka May 15, 2024 • edited Loading

Choose a reason for hiding this comment

TheSpiritXIII commented Feb 2, 2024 •

edited

Loading

bwplotka left a comment •

edited

Loading

bwplotka May 15, 2024 •

edited

Loading

bwplotka May 15, 2024 •

edited

Loading