Skip to content

Add proxy-secrets to cmsweb prometheus in monitoring namespace#1365

Closed
mrceyhun wants to merge 1 commit into
dmwm:masterfrom
mrceyhun:cmsweb-prometheus-proxy-secret
Closed

Add proxy-secrets to cmsweb prometheus in monitoring namespace#1365
mrceyhun wants to merge 1 commit into
dmwm:masterfrom
mrceyhun:cmsweb-prometheus-proxy-secret

Conversation

@mrceyhun
Copy link
Copy Markdown
Contributor

  • Because crabserver cherrypy process exporter requires proxy certificates to query :port/crabserver/metrics which is behind service authentication, cmsweb Prometheus needs proxy-secrets in monitoring namespace.
  • Requires cron-proxy deployment and proxy-secrets secret creation in monitoring namespace from CMSWEB operators.

Together with #1356 , this is ready to deploy in testbed (not urgent).

fyi @mapellidario @novicecpp

@mrceyhun mrceyhun self-assigned this Apr 24, 2023
@arooshap
Copy link
Copy Markdown
Member

@mrceyhun I have deployed this PR and the other one with the relevant secrets. Kindly validate it, thanks!

@mrceyhun
Copy link
Copy Markdown
Contributor Author

@mapellidario @novicecpp as you know this config is also not scraping the metrics because of CherryPy's its own authentication and it is impossible to define required CherryPy authentication headers in Prometheus configuration. To overcome this obstacle, you can use this basic script dmwm/cmsweb-exporters#11 or cmweb_ping as you wish.

I just wanted to report here for future reference.

@mapellidario
Copy link
Copy Markdown
Member

Thanks Ceyhun. What do you think, do you still want to merge this PR or should we just drop this option, since you found an alternative one?

@mrceyhun
Copy link
Copy Markdown
Contributor Author

@mapellidario It seems that I wrote to wrong PR. Because we will not need proxy secrets, I'll drop this PR. But we'll use this PR https://github.com/dmwm/CMSKubernetes/pull/1356/files with a bit refactored, which introduces container port service discovery which is required even in the alternative version. Crabserver pod will expose metrics in 2 container so we'll need container port discovery as suggested by Prometheus community.

@arooshap arooshap closed this Oct 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants