dshane1903 commented on issue #6779: URL: https://github.com/apache/camel-k/issues/6779#issuecomment-5455412317
I took a look at the current metrics setup. Enabling **SecureServing: true** seems like the smallest change. But the existing **PodMonitor** assumes HTTP, and controller runtime will use a self signed cert unless certs are explicitly configured. I also checked **filters.WithAuthenticationAndAuthorization**, but that would make this a bigger change since it needs additional TokenReview/SubjectAccessReview permissions. Also the **/metrics** reader role based access control, bearer-token handling, and the PodMonitor updates. I would prefer to keep this issue scoped to HTTPS by default, update the monitoring config, and then add an environment variable to go back into HTTP if we need to preserver the old behavior. If you want the full authorization and authentication setup included here instead, I can do that too. Does the TLS only scope sound right? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
