当前位置：文江博客话题详情

Prometheus远程写入mTLS

发布于 2025-01-09 10:18:15 字数 163 浏览 0 评论 0原文

我正在尝试设置 Prometheus 到 Prometheus 指标流，我可以通过标志 --enable-feature=remote-write-receiver 来完成此操作。

但是我需要那里有 mTLS，有人可以建议手册或发布配置示例吗？

感谢你的帮助

原文

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

成熟稳重的好男人 2025-01-16 10:18:15

还有第二个配置文件，其中包含与 HTTP 服务器相关的实验选项，并且它具有启用 TLS 的选项：

tls_server_config:
  # Certificate and key files for server to use to authenticate to client.
  cert_file: <filename>
  key_file: <filename>

  # Server policy for client authentication. Maps to ClientAuth Policies.
  # For more detail on clientAuth options:
  # https://golang.org/pkg/crypto/tls/#ClientAuthType
  #
  # NOTE: If you want to enable client authentication, you need to use
  # RequireAndVerifyClientCert. Other values are insecure.
  client_auth_type: RequireAndVerifyClientCert # default = "NoClientCert"

  # CA certificate for client certificate authentication to the server.
  client_ca_file: <filename>

此文件的文档位于 HTTPS 和身份验证文章。请注意，创建此文件后，您必须使用额外选项启动 Prometheus：

--web.config.file=/path/to/the/file.yml

以上内容将在接收部分进行配置。发送部分需要在其 remote_write 中配置客户端 TLS 证书：

remote_write:
- url: https://prometheus.example.com
  tls_config:
    # https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config
    cert_file: <filename>
    key_file: <filename>

There is a second config file with experimental options related to HTTP server, and it has options to enable TLS:

tls_server_config:
  # Certificate and key files for server to use to authenticate to client.
  cert_file: <filename>
  key_file: <filename>

  # Server policy for client authentication. Maps to ClientAuth Policies.
  # For more detail on clientAuth options:
  # https://golang.org/pkg/crypto/tls/#ClientAuthType
  #
  # NOTE: If you want to enable client authentication, you need to use
  # RequireAndVerifyClientCert. Other values are insecure.
  client_auth_type: RequireAndVerifyClientCert # default = "NoClientCert"

  # CA certificate for client certificate authentication to the server.
  client_ca_file: <filename>

The documentation on this file is located at the HTTPS AND AUTHENTICATION article. Note that after creating this file, you have to start Prometheus with the extra option:

--web.config.file=/path/to/the/file.yml

The above is to be configured on the receiving part. The sending part needs a client TLS certificate configured in its remote_write:

remote_write:
- url: https://prometheus.example.com
  tls_config:
    # https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config
    cert_file: <filename>
    key_file: <filename>

回复收藏 0 原文

~没有更多了~