kubevirt / containerized-data-importer / #5473

49%

Build Type

push

travis-ci

Committed by web-flow

Commit Message

metrics-server: use SecureServing option (#3837)

As part of an effort to standardize metric exposure across KubeVirt
components on port 8443, we are transitioning to HTTPS with TLS
encryption for the metrics-server.

To facilitate this, we leverage the controller-runtime's SecureServing
option, which creates a self-signed certificate and configures it as the
server certificate for the metrics endpoint when no external certificate
is provided[1].

Subsequent PRs will replace this self-signed certificate with a CDI
generated one to enable a fully trusted and secure connection between
the Prometheus instance and the target metrics endpoints as specified by
the CDI ServiceMonitor. Until that integration is complete, the
ServiceMonitor will be configured with insecureSkipVerify to allow
scraping despite the untrusted certificate.

[1] https://github.com/kubernetes-sigs/controller-runtime/pull/2407

Signed-off-by: Adi Aloni <aaloni@redhat.com>

Run Details

3 of 20 new or added lines in 5 files covered. (15.0%)

2 existing lines in 1 file now uncovered.

17101 of 28740 relevant lines covered (59.5%)

0.66 hits per line