Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure that RTE metrics are served securely with kube-rbac-proxy #273

Conversation

swatisehgal
Copy link
Collaborator

@swatisehgal swatisehgal commented Apr 3, 2024

Add Kube-rbac-proxy side car container to RTE daemonset to ensure that RTE metrics are served securely.

Reference doc: https://rhobs-handbook.netlify.app/products/openshiftmonitoring/collecting_metrics.md/

@swatisehgal swatisehgal requested a review from ffromani April 3, 2024 09:23
@swatisehgal swatisehgal force-pushed the rte-serve-metrics-securely branch 3 times, most recently from c2f991a to 8693c8d Compare April 3, 2024 10:33
@swatisehgal
Copy link
Collaborator Author

/test e2e-metrics-https

@swatisehgal
Copy link
Collaborator Author

swatisehgal commented Apr 3, 2024

Hmm, this is strange.
The cluster ready step (/check-ds.sh) seems to succeed in case of e2e-ic job but fails for e2e-metrics-https job!
Times out in case of latter. Reaches its retry limit of 24 (retry done every 5 sec).

@swatisehgal swatisehgal force-pushed the rte-serve-metrics-securely branch from 8693c8d to 09e9374 Compare April 3, 2024 11:32
@swatisehgal swatisehgal force-pushed the rte-serve-metrics-securely branch from 09e9374 to 629c9ec Compare April 10, 2024 15:20
@swatisehgal swatisehgal force-pushed the rte-serve-metrics-securely branch from 629c9ec to 7b3b63a Compare April 10, 2024 15:21
@swatisehgal
Copy link
Collaborator Author

swatisehgal commented Apr 11, 2024

/close

Kube-rbac-proxy was considered a suitable way to expose metrics over https for the ease of backportability.
For now, we already have metrics served over https in 0.19,0.18 and 0.17 versions and if this support is a requirement we can expect the consumers to upgrade to one of these three versions.

@swatisehgal swatisehgal deleted the rte-serve-metrics-securely branch April 11, 2024 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant