fix(manifests): fix prometheus monitoring config#27
fix(manifests): fix prometheus monitoring config#27robert-bell merged 1 commit intoopendatahub-io:mainfrom
Conversation
Kubebuilder by default serves metrics on 8443 with tls. Signed-off-by: Rob Bell <robell@redhat.com>
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Tip 📝 Customizable high-level summaries are now available in beta!You can now customize how CodeRabbit generates the high-level summary in your pull requests — including its content, structure, tone, and formatting.
Example instruction:
Note: This feature is currently in beta for Pro-tier users, and pricing will be announced later. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
| - port: metrics | ||
| scheme: https | ||
| tlsConfig: | ||
| insecureSkipVerify: true |
There was a problem hiding this comment.
question: @sutaakar is it acceptable to skip cert checks for prod? I had a look at how other components are doing it and I saw this pattern in a few places (e.g. feast-operator).
Oddly, when I tested it locally without this setting prometheus didn't object to the certs being untrusted. Does kubebuilder do anything clever to mean the certs are trusted? It might just have been some misconfig in my local prometheus setup.
There was a problem hiding this comment.
question: @sutaakar is it acceptable to skip
not sure, I guess we can follow config of other components
|
@sutaakar is there anything else that needs doing to make sure the prometheus operator picks up the podmonitor? Are there any labels that need adding? Do we need to do any extra testing of the set up with the odh operator or is it OK to let those builds fail (if there is a problem)? I saw you've already added the prometheus rule in opendatahub-io/opendatahub-operator#2854. |
|
I guess it will be best to check it once everything is merged, hopefully it shouldn't break anything |
|
/lgtm |
What this PR does / why we need it:
Fixes the port and tls config for the prometheus monitoring config. Kubebuilder by default serves metrics on 8443 with tls enabled, but for some reason we had the metrics port set to 8080.
I've tested the config in a kind cluster.
This is part of https://issues.redhat.com/browse/RHOAIENG-37877.
Which issue(s) this PR fixes (optional, in
Fixes #<issue number>, #<issue number>, ...format, will close the issue(s) when PR gets merged):Fixes #
Checklist: