Uploaded image for project: 'OpenShift Cloud'
  1. OpenShift Cloud
  2. OCPCLOUD-2271

Port 9258:Ensure Cloud Controller Manager Operator metrics are only available via HTTPS

XMLWordPrintable

    • Ensure Cloud Controller Manager Operator metrics are only available via HTTPS
    • False
    • None
    • False
    • Not Selected
    • To Do
    • OCPSTRAT-970 - Ports used by OCP should have TLS supports
    • OCPSTRAT-970Ports used by OCP should have TLS supports
    • 0% To Do, 0% In Progress, 100% Done
    • CLOUD Sprint 245, CLOUD Sprint 246, CLOUD Sprint 247, CLOUD Sprint 248, CLOUD Sprint 249, CLOUD Sprint 250, CLOUD Sprint 251

      Currently, we are serving the metrics as http on 9258 we need to upgrade to use TLS

      To solve this, use Kube RBAC proxy as a side container to proxy the metrics and provide an authentication/authorization layer for the metrics

      Related to https://issues.redhat.com/browse/RFE-4665

            joelspeed Joel Speed
            rh-ee-smodeel Subin M
            Zhaohua Sun Zhaohua Sun
            Jeana Routh Jeana Routh
            Joel Speed Joel Speed
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: