Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Mutual TLS Support #74

Open
tejaswiniVadlamudi opened this issue May 30, 2022 · 0 comments
Open

Add Mutual TLS Support #74

tejaswiniVadlamudi opened this issue May 30, 2022 · 0 comments

Comments

@tejaswiniVadlamudi
Copy link

tejaswiniVadlamudi commented May 30, 2022

  1. Support TLS 1.3 and 1.2 versions
  2. ConfigMap-reload needs to support Mutual TLS if the target process is running in TLS mode
  3. ConfigMap-reload can also expose metrics over Mutual TLS
  4. TLS Server in ConfigMap-reload can wait for the TLS Certs to be available as part of the start-up process
  5. TLS Certificates need to be automatically reloaded (if expired) using inotify mechanism

A recent experimental feature in Prometheus allows users to configure direct TLS support without the usage of proxies.
See prometheus/prometheus#8316, https://prometheus.io/docs/prometheus/latest/configuration/https/ and https://prometheus.io/docs/guides/tls-encryption/ for more details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant