kubernetes-sigs/prometheus-adapter
1
0
Fork 1
mirror of https://github.com/kubernetes-sigs/prometheus-adapter.git synced 2026-04-07 10:17:51 +00:00
Code Issues Projects Releases Packages Activity Actions

Skip TLS verification for Issue #169

Browse source
This commit is contained in:
Neb, Sebastian 2019-02-26 09:11:34 +01:00
parent ab6ada9081
commit 0e05facc05
1 changed files with 23 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

24
cmd/adapter/adapter.go
View file

@ -63,6 +63,8 @@ type PrometheusAdapter struct {
MetricsRelistInterval time.Duration MetricsRelistInterval time.Duration
// MetricsMaxAge is the period to query available metrics for // MetricsMaxAge is the period to query available metrics for
MetricsMaxAge time.Duration MetricsMaxAge time.Duration
// SkipTLSVerification indicates whether TLS verification should be skipped or not
SkipTLSVerification bool
metricsConfig *adaptercfg.MetricsDiscoveryConfig metricsConfig *adaptercfg.MetricsDiscoveryConfig
} }
@ -75,7 +77,14 @@ func (cmd *PrometheusAdapter) makePromClient() (prom.Client, error) {
var httpClient *http.Client var httpClient *http.Client
if cmd.PrometheusCAFile != "" { if cmd.SkipTLSVerification {
prometheusInsecureClient, err := makePrometheusInsecureClient()
if err != nil {
return nil, err
}
httpClient = prometheusInsecureClient
glog.Info("successfully skipped tls verification")
} else if cmd.PrometheusCAFile != "" {
prometheusCAClient, err := makePrometheusCAClient(cmd.PrometheusCAFile) prometheusCAClient, err := makePrometheusCAClient(cmd.PrometheusCAFile)
if err != nil { if err != nil {
return nil, err return nil, err
@ -113,6 +122,8 @@ func (cmd *PrometheusAdapter) addFlags() {
"kubeconfig file used to configure auth when connecting to Prometheus.") "kubeconfig file used to configure auth when connecting to Prometheus.")
cmd.Flags().StringVar(&cmd.PrometheusCAFile, "prometheus-ca-file", cmd.PrometheusCAFile, cmd.Flags().StringVar(&cmd.PrometheusCAFile, "prometheus-ca-file", cmd.PrometheusCAFile,
"Optional CA file to use when connecting with Prometheus") "Optional CA file to use when connecting with Prometheus")
cmd.Flags().StringVar(&cmd.SkipTLSVerification, "prometheus-skip-tls-verification", cmd.SkipTLSVerification,
"Optional flag indicating whether connection to prometheus should skip tls verification")
cmd.Flags().StringVar(&cmd.PrometheusTokenFile, "prometheus-token-file", cmd.PrometheusTokenFile, cmd.Flags().StringVar(&cmd.PrometheusTokenFile, "prometheus-token-file", cmd.PrometheusTokenFile,
"Optional file containing the bearer token to use when connecting with Prometheus") "Optional file containing the bearer token to use when connecting with Prometheus")
cmd.Flags().StringVar(&cmd.AdapterConfigFile, "config", cmd.AdapterConfigFile, cmd.Flags().StringVar(&cmd.AdapterConfigFile, "config", cmd.AdapterConfigFile,
@ -312,3 +323,14 @@ func makePrometheusCAClient(caFilename string) (*http.Client, error) {
}, },
}, nil }, nil
} }
func makePrometheusInsecureClient() (*http.Client) {
return &http.Client{
Transport: &http.Transport{
TLSClientConfig: &tls.Config{
RootCAs: pool,
SkipTLSVerification: true
},
},
}
}