We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b876b3d commit 0454f08Copy full SHA for 0454f08
1 file changed
pkg/components/metrics_client_ca.go pkg/components/metrics.gopkg/components/metrics_client_ca.go renamed to pkg/components/metrics.go
@@ -28,6 +28,11 @@ var metricsClientCAConsumerPaths = []string{
28
29
const metricsClientCANamespace = "openshift-monitoring"
30
31
+// ProvisionMetricsClientCA provisions the admin-kubeconfig-signer CA that
32
+// kube-rbac-proxy sidecars in kube-state-metrics and node-exporter use to
33
+// verify client certificates on incoming scrape requests. The CA cannot be
34
+// included in static manifests because it is generated at MicroShift startup
35
+// and may be rotated; this function ensures the ConfigMap reflects the current CA.
36
func ProvisionMetricsClientCA(ctx context.Context, cfg *config.Config) error {
37
needed := false
38
for _, p := range metricsClientCAConsumerPaths {
0 commit comments