Merge pull request #1767 from fabric8io/k8s-sd-https-config

Kubernetes SD: Update example config with TLS options
This commit is contained in:
Fabian Reinartz 2016-06-27 15:49:52 +02:00 committed by GitHub
commit f68789dc5a

View file

@ -9,12 +9,23 @@
scrape_configs: scrape_configs:
- job_name: 'kubernetes-cluster' - job_name: 'kubernetes-cluster'
# Default to scraping over https. If required, just disable this or change to
# `http`.
scheme: https
# This TLS & bearer token file config is used to connect to the actual scrape # This TLS & bearer token file config is used to connect to the actual scrape
# endpoints for cluster components. This is separate to discovery auth # endpoints for cluster components. This is separate to discovery auth
# configuration (`in_cluster` below) because discovery & scraping are two # configuration (`in_cluster` below) because discovery & scraping are two
# separate concerns in Prometheus. # separate concerns in Prometheus.
tls_config: tls_config:
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
# If your node certificates are self-signed or use a different CA to the
# master CA, then disable certificate verification below. Note that
# certificate verification is an integral part of a secure infrastructure
# so this should only be disabled in a controlled environment. You can
# disable certificate verification by uncommenting the line below.
#
# insecure_skip_verify: true
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
kubernetes_sd_configs: kubernetes_sd_configs: