It seems like the PrometheusReporter doesn't support HTTPS. The Flink reporter seems to be based on the HttpServer prometheus client. I wonder if using the servlet client would allow us to add HTTPS support: https://github.com/prometheus/client_java/blob/master/simpleclient_servlet/src/main/java/io/prometheus/client/exporter/MetricsServlet.java / https://github.com/prometheus/client_java#http Running the Servlet inside an SSL enabled Jetty should do the trick.
If this is reliable, you could consider contributing this back to Flink. On Sun, Jun 13, 2021 at 4:27 PM Ashutosh Uttam <ashutoshut...@gmail.com> wrote: > Hi Austin, > > I am deploying Flink on K8s with multiple Job Manager pods (For HA) & > Task Manager pods. > > Each JobManager & Task Manager are running an PrometheusReporter instance > and using Prometheus’ service discovery support for Kubernetes to discover > all pods (Job Manager & Task Manager) and expose the container as targets > > Please let me know if a reverse proxy can work on this deployment as we > have multiple JMs & TMs and cannot use static scrape targets > > Regards, > Ashutosh > > On Sun, Jun 13, 2021 at 2:25 AM Austin Cawley-Edwards < > austin.caw...@gmail.com> wrote: > >> Hi Ashutosh, >> >> How are you deploying your Flink apps? Would running a reverse proxy like >> Nginx or Envoy that handles the HTTPS connection work for you? >> >> Best, >> Austin >> >> On Sat, Jun 12, 2021 at 1:11 PM Ashutosh Uttam <ashutoshut...@gmail.com> >> wrote: >> >>> Hi All, >>> >>> Does PrometheusReporter provide support for HTTPS?. I couldn't find any >>> information in flink documentation. >>> >>> Is there any way we can achieve the same? >>> >>> Thanks & Regards, >>> Ashutosh >>> >>> >>>
