search

charmed-lma / charm-k8s-prometheus

Kubernetes Operator for Prometheus
Apache License 2.0
4 stars 2 forks source link

First approach to the TLS termination implementation for the Prometheus #25

Closed exceptorr closed 4 years ago

exceptorr commented 4 years ago

Implementing the TLS termination for the Prometheus using nginx as a sidecar container acting as a reverse proxy, hiding non-secure Prometheus endpoint behind itself.

Also, the 'enforce-pod-restart' config option has been introduced, giving the user an option to forcibly restart the workloads after the config-changed event (since current Juju/charm architecture does not give an option to either send system signal or execute any service control command).

exceptorr commented 4 years ago

Although it's still in progress and requires some polishing, in the meantime I will be happy to hear some feedback from you, @relaxdiego :-)