Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add proxy-secrets to cmsweb prometheus in monitoring namespace #1365

Closed

Conversation

mrceyhun
Copy link
Contributor

  • Because crabserver cherrypy process exporter requires proxy certificates to query :port/crabserver/metrics which is behind service authentication, cmsweb Prometheus needs proxy-secrets in monitoring namespace.
  • Requires cron-proxy deployment and proxy-secrets secret creation in monitoring namespace from CMSWEB operators.

Together with #1356 , this is ready to deploy in testbed (not urgent).

fyi @mapellidario @novicecpp

@mrceyhun mrceyhun self-assigned this Apr 24, 2023
@arooshap
Copy link
Member

@mrceyhun I have deployed this PR and the other one with the relevant secrets. Kindly validate it, thanks!

@mrceyhun
Copy link
Contributor Author

@mapellidario @novicecpp as you know this config is also not scraping the metrics because of CherryPy's its own authentication and it is impossible to define required CherryPy authentication headers in Prometheus configuration. To overcome this obstacle, you can use this basic script dmwm/cmsweb-exporters#11 or cmweb_ping as you wish.

I just wanted to report here for future reference.

@mapellidario
Copy link
Member

Thanks Ceyhun. What do you think, do you still want to merge this PR or should we just drop this option, since you found an alternative one?

@mrceyhun
Copy link
Contributor Author

@mapellidario It seems that I wrote to wrong PR. Because we will not need proxy secrets, I'll drop this PR. But we'll use this PR https://github.com/dmwm/CMSKubernetes/pull/1356/files with a bit refactored, which introduces container port service discovery which is required even in the alternative version. Crabserver pod will expose metrics in 2 container so we'll need container port discovery as suggested by Prometheus community.

@arooshap arooshap closed this Oct 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants