kubernetes-sigs / inference-perf / 36037540510

81%

push

github

feat(metrics): add bearer_token and verify_ssl to Prometheus client (#819)

## Summary
Auth half of kubernetes-sigs/inference-perf#810: the Prometheus client
can now query auth-gated servers (e.g. OpenShift Thanos) via
`metrics.prometheus.bearer_token`, `verify_ssl`, and custom `headers`.
This unblocks time-series collection against secured Prometheus.

Part of kubernetes-sigs/inference-perf#810. Fixes #816.

## Root cause
- `PrometheusClientConfig` had no auth/TLS options
(`inference_perf/config/client/server_metrics/config.py:20`)
- `execute_query` never passed `verify=` and `get_headers()` always
returned `{}`
(`inference_perf/client/server_metrics/prometheus_client/base.py:154,209`)

## Fix
- New config fields: `bearer_token` (SecretStr, auto-redacted like
`server.api_key`), `verify_ssl` (default `True`), `headers` (same
pattern as `api.headers`)
- `get_headers()` merges custom headers + bearer token; explicit
`Authorization` (case-insensitive) wins
- `execute_query` forwards `verify=self.verify_ssl`; Google-managed
client merges custom headers under its own token
- Docs synced: `docs/cli_flags.md`, `docs/config.md` credentials section

Out of scope (blocked on #489/#740): range queries, `raw_metrics/` dump,
BR0.2 `components[].time_series` mapping.

## How it was tested
- 11 new tests: auth header happy path, header merge, explicit-auth
precedence (+lowercase edge), `verify` forwarding, TLS-on/empty-headers
regression, config defaults
- Targeted + related suites: 78/78 pass (prometheus client,
server-metrics config, redaction, session+prometheus reports, query
goldens)
- Full `pytest tests`: no new failures (7 pre-existing env failures —
tkinter, Windows signals, tokenizer downloads — fail identically on
clean tree)
- `ruff format`, `ruff check`, `mypy --strict`, `sync_cli_flags_doc
--check`, `sync_runtime_metrics_doc --check`: all clean

13 of 16 new or added lines in 3 files covered. (81.25%)

10463 of 12984 relevant lines covered (80.58%)

0.81 hits per line