Skip to content

Enable TLS for /metrics endpoint and add tests #10495

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

peppi-lotta
Copy link

Description

This PR provides functionality to enable TLS encryption in /metrics endpoint. This a solution can be used as a patch until the TLS solution in the enterprise fork gets upstreamed. There is no timeline for upstreaming hence this PR. The tls can be enables in a similar way as Prometheus metrics are enabled.

Values that can be specified are:

  • metricsTLSEnabled
  • metricsTLSCACertFile
  • metricsTLSCertFile
  • metricsTLSPrivateKeyFile
  • metricsClientAuthType
  • metricsTLSMinVersion

Related issues/PRs

Todos

  • Tests
  • Documentation
  • Release note

Release Note

TBD

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

  • docs-pr-required: This change requires a change to the documentation that has not been completed yet.
  • docs-completed: This change has all necessary documentation completed.
  • docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

  • release-note-required: This PR has user-facing changes. Most PRs should have this label.
  • release-note-not-required: This PR has no user-facing changes.

Other optional labels:

  • cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
  • needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.

@peppi-lotta peppi-lotta requested a review from a team as a code owner June 2, 2025 10:13
@marvin-tigera marvin-tigera added this to the Calico v3.31.0 milestone Jun 2, 2025
@marvin-tigera marvin-tigera added release-note-required Change has user-facing impact (no matter how small) docs-pr-required Change is not yet documented labels Jun 2, 2025
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@peppi-lotta peppi-lotta force-pushed the peppi-lotta/tls-support-for-metrics-endpoint branch from 2d7edd0 to 7678e16 Compare June 30, 2025 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs-pr-required Change is not yet documented release-note-required Change has user-facing impact (no matter how small)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants