From 0c587ebf966307446b3e7a9094cd6c44bbca89e2 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sat, 20 Apr 2024 15:29:08 +0200 Subject: ch-apps: upgrade to kubernetes 1.30 and improve certificate handling for standalone kubelet --- .../prometheus/exporter/standalone-kubelet/tasks/main.yml | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'roles/monitoring/prometheus') diff --git a/roles/monitoring/prometheus/exporter/standalone-kubelet/tasks/main.yml b/roles/monitoring/prometheus/exporter/standalone-kubelet/tasks/main.yml index ffeb974f..3335769a 100644 --- a/roles/monitoring/prometheus/exporter/standalone-kubelet/tasks/main.yml +++ b/roles/monitoring/prometheus/exporter/standalone-kubelet/tasks/main.yml @@ -4,16 +4,22 @@ content: | location = /standalone-kubelet { proxy_pass https://{{ kubernetes_standalone_address | default('127.0.0.1') }}:{{ kubernetes_standalone_port | default(10250) }}/metrics; + proxy_ssl_verify on; + proxy_ssl_trusted_certificate /etc/ssl/standalone-kubelet/ca-crt.pem; proxy_ssl_certificate /etc/ssl/standalone-kubelet/client/crt.pem; proxy_ssl_certificate_key /etc/ssl/standalone-kubelet/client/key.pem; } location = /standalone-kubelet/resource { proxy_pass https://{{ kubernetes_standalone_address | default('127.0.0.1') }}:{{ kubernetes_standalone_port | default(10250) }}/metrics/resource; + proxy_ssl_verify on; + proxy_ssl_trusted_certificate /etc/ssl/standalone-kubelet/ca-crt.pem; proxy_ssl_certificate /etc/ssl/standalone-kubelet/client/crt.pem; proxy_ssl_certificate_key /etc/ssl/standalone-kubelet/client/key.pem; } location = /standalone-kubelet/probes { proxy_pass https://{{ kubernetes_standalone_address | default('127.0.0.1') }}:{{ kubernetes_standalone_port | default(10250) }}/metrics/probes; + proxy_ssl_verify on; + proxy_ssl_trusted_certificate /etc/ssl/standalone-kubelet/ca-crt.pem; proxy_ssl_certificate /etc/ssl/standalone-kubelet/client/crt.pem; proxy_ssl_certificate_key /etc/ssl/standalone-kubelet/client/key.pem; } -- cgit v1.2.3