Skip to content

Commit 0454f08

Browse files
committed
renamed metrics_client_ca.go to metrics.go
1 parent b876b3d commit 0454f08

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,11 @@ var metricsClientCAConsumerPaths = []string{
2828

2929
const metricsClientCANamespace = "openshift-monitoring"
3030

31+
// ProvisionMetricsClientCA provisions the admin-kubeconfig-signer CA that
32+
// kube-rbac-proxy sidecars in kube-state-metrics and node-exporter use to
33+
// verify client certificates on incoming scrape requests. The CA cannot be
34+
// included in static manifests because it is generated at MicroShift startup
35+
// and may be rotated; this function ensures the ConfigMap reflects the current CA.
3136
func ProvisionMetricsClientCA(ctx context.Context, cfg *config.Config) error {
3237
needed := false
3338
for _, p := range metricsClientCAConsumerPaths {

0 commit comments

Comments
 (0)