Metrics-API Scaler Feature Question

[thominglin]

Hi,
I am attempting to use the Metrics-API scaler - the API I am attempting to access uses API-Key authentication but also requires a tls certificate - when I create the scaler I am getting the following error:

ERROR scale_handler error getting metric for trigger {"scaledObject.Namespace": "tenable-enclave-security", "scaledObject.Name": "scanner-ss-scaledobject", "trigger": "metricsAPIScaler", "error": "error requesting metrics endpoint: Get "https://tes.tenable-enclave-security.svc.cluster.local/rest/scanResult\": remote error: tls: certificate required"

I have tested from a pod in the same namespace using the following command and it returns results:
curl -X GET -k --header "x-apikey: accesskey=xxxxxxxxxxxxxxxxxxxxxxxx; secretkey=xxxxxxxxxxxxxxxxxxxxxxxx" https://tes.tenable-enclave-security.svc.cluster.local/rest/scanResult?fields=running --cert /tes/ca/tls.crt --key /tes/ca/tls.key

Is there a way to pass both the x-apikey header and the tls certificate to the scaler? Or is that something that could be included in a future release of the scaler? Any response would be appreciated.

Thom Inglin
Applied Information Sciences

[rickbrouwer]

Hi Thom,

That is currently not supported in the Metrics API scaler. That would indeed require an adjustment. Is that something you would like to contribute?

And just curious. In your curl command, do you need both, x-apikey and TLS, or would it also work with just only TLS?

[rickbrouwer]

@thominglin can you create a feature request at the issues page?

[thominglin]

Yes I think I can do that. Thanks.

[thominglin]

@rickbrouwer it appears that your PR is still waiting for another approver

[rickbrouwer]

Yes, that's right. All tests are green. It's listed as a nice-to-have for the upcoming release so it might still go.

[thominglin]

Ok thanks. I appreciate you putting in the effort.

[thominglin]

Configure both x-apikey and tls for Metrics-Api Scaler #6642