dss
dss copied to clipboard
Bad certificate errors when Prometheus is not exposed externally
When expose_internal in metadata_base.libsonnet is set to its default value of false, the CRDB nodes all periodically print error messages like httpLoggerserver.go:3054 http: TLS handshake error from 10.24.0.12:35404: remote error: tls: bad certificate. The 10.24.0.12 IP address appears to be the IP address of the prometheus pod (determined with kubectl get pod -o wide).