search

microsoft / OMS-docker

Docker image for OMS (Operations Management Suite) Linux agent.
Other
79 stars 135 forks source link

TLS configuration explanation missing #428

Open kdziurdz opened 3 years ago

kdziurdz commented 3 years ago

Hey! According to this commentary in config map I'd need to setup TLS in order scrape Prometheus metrics securely using HTTPS. The problem is that there is no advice how to provide such configuration OMS pod in running AKS cluster.

Pods that exposes Prometheus metrics endpoint, are only accessible via HTTPS. I have client cert, key and ca cert, and I'm able to scrape them using curl.

How can I connect those two pieces together and collect Prometheus metrics using OMS agent from secured endpoint? How to provide certificates to OMS agent? How to advice OMS agent to use provided certificates?

Regards

austonli commented 2 years ago

@vishiy, would be able to help review and clarify the answer?

vishiy commented 2 years ago

we dont have a way to point to a cert, yet. this was tracked, but because of lack of ask from many customers, we didn't prioritize this. If its blocking you, please confirm and we will prioritize this.