Add support for prometheus TLS

Fixes #479
rabbitmq · Dec 23, 2020 · 7803fe7 · 7803fe7
1 parent 1e16079
commit 7803fe7
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/internal/resource/configmap.go b/internal/resource/configmap.go
@@ -42,6 +42,10 @@ listeners.ssl.default = 5671
 management.ssl.certfile   = /etc/rabbitmq-tls/tls.crt
 management.ssl.keyfile    = /etc/rabbitmq-tls/tls.key
 management.ssl.port       = 15671
+
+prometheus.ssl.certfile = /etc/rabbitmq-tls/tls.crt
+prometheus.ssl.keyfile   = /etc/rabbitmq-tls/tls.key
+prometheus.ssl.port       = 15691
 `
 	caCertPath  = "/etc/rabbitmq-tls/ca.crt"
 	tlsCertPath = "/etc/rabbitmq-tls/tls.crt"

diff --git a/internal/resource/statefulset.go b/internal/resource/statefulset.go
@@ -711,6 +711,10 @@ func (builder *StatefulSetBuilder) updateContainerPorts() []corev1.ContainerPort
 				Name:          "management-tls",
 				ContainerPort: 15671,
 			},
+			corev1.ContainerPort{
+				Name:          "prometheus-tls",
+				ContainerPort: 15691,
+			},
 		)
 
 		// enable tls ports for plugins
@@ -764,7 +768,7 @@ func (builder *StatefulSetBuilder) updateContainerPortsOnlyTLSListeners() []core
 		},
 		{
 			Name:          "prometheus",
-			ContainerPort: 15692,
+			ContainerPort: 15691,
 		},
 	}