prometheus-engine icon indicating copy to clipboard operation
prometheus-engine copied to clipboard

support TLS config: insecure_skip_verify for PodMonitoring config

Open hixichen opened this issue 2 years ago • 2 comments

with promethus config:

    - job_name: 'vault-pods'
      metrics_path: "/v1/sys/metrics"
      params:
        format: ['prometheus']
      scheme: https
      tls_config:
        insecure_skip_verify: true

Did not find any way to set the insecure_skip_verify: true from the scrapeendpoint doc

Error message:

2022-06-01T17:27:06.271Z [INFO]  http: TLS handshake error from 10.1.2.125:50352: remote error: tls: bad certificate

ip: 10.1.2.125, is the pod ip of the collector.

❯ kubectl get po -n gmp-system
NAME                              READY   STATUS    RESTARTS      AGE
collector-jsjx9                   2/2     Running   0             25h

hixichen avatar Jun 01 '22 17:06 hixichen

Bumping as we are facing similar issues with our GMP instance and pulling metrics from the Kube RBAC policy. 2022/09/14 16:22:12 http: TLS handshake error from 10.30.18.133:44728: remote error: tls: bad certificate

jimid27 avatar Sep 14 '22 19:09 jimid27

Hi,

We are currently working on adding scrape authentication. See similar issue https://github.com/GoogleCloudPlatform/prometheus-engine/issues/241.

pintohutch avatar Sep 23 '22 18:09 pintohutch