Add proxy-secrets to cmsweb prometheus in monitoring namespace#1365
Add proxy-secrets to cmsweb prometheus in monitoring namespace#1365mrceyhun wants to merge 1 commit into
Conversation
|
@mrceyhun I have deployed this PR and the other one with the relevant secrets. Kindly validate it, thanks! |
|
@mapellidario @novicecpp as you know this config is also not scraping the metrics because of CherryPy's its own authentication and it is impossible to define required CherryPy authentication headers in Prometheus configuration. To overcome this obstacle, you can use this basic script dmwm/cmsweb-exporters#11 or I just wanted to report here for future reference. |
|
Thanks Ceyhun. What do you think, do you still want to merge this PR or should we just drop this option, since you found an alternative one? |
|
@mapellidario It seems that I wrote to wrong PR. Because we will not need proxy secrets, I'll drop this PR. But we'll use this PR https://github.com/dmwm/CMSKubernetes/pull/1356/files with a bit refactored, which introduces container port service discovery which is required even in the alternative version. Crabserver pod will expose metrics in 2 container so we'll need container port discovery as suggested by Prometheus community. |
:port/crabserver/metricswhich is behind service authentication, cmsweb Prometheus needs proxy-secrets inmonitoringnamespace.cron-proxydeployment andproxy-secretssecret creation inmonitoringnamespace from CMSWEB operators.Together with #1356 , this is ready to deploy in testbed (not urgent).
fyi @mapellidario @novicecpp