tixie/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity

Fix prometheus ssl certs

Browse source
This commit is contained in:
Alex 2023-01-03 21:00:10 +01:00
parent 606668e25e
commit fe805b6bab
Signed by untrusted user: lx
GPG key ID: 0E496D15096376BE
2 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
cluster/prod/app/telemetry/config/prometheus.yml
View file

@ -12,7 +12,7 @@ scrape_configs:
services: services:
- 'node-exporter' - 'node-exporter'
tls_config: tls_config:
ca_file: /etc/prometheus/consul.crt ca_file: /etc/prometheus/consul-ca.crt
cert_file: /etc/prometheus/consul-client.crt cert_file: /etc/prometheus/consul-client.crt
key_file: /etc/prometheus/consul-client.key key_file: /etc/prometheus/consul-client.key
@ -22,7 +22,7 @@ scrape_configs:
services: services:
- 'tricot-metrics' - 'tricot-metrics'
tls_config: tls_config:
ca_file: /etc/prometheus/consul.crt ca_file: /etc/prometheus/consul-ca.crt
cert_file: /etc/prometheus/consul-client.crt cert_file: /etc/prometheus/consul-client.crt
key_file: /etc/prometheus/consul-client.key key_file: /etc/prometheus/consul-client.key
@ -35,7 +35,7 @@ scrape_configs:
services: services:
- 'garage-admin' - 'garage-admin'
tls_config: tls_config:
ca_file: /etc/prometheus/consul.crt ca_file: /etc/prometheus/consul-ca.crt
cert_file: /etc/prometheus/consul-client.crt cert_file: /etc/prometheus/consul-client.crt
key_file: /etc/prometheus/consul-client.key key_file: /etc/prometheus/consul-client.key
@ -48,7 +48,7 @@ scrape_configs:
services: services:
- 'drone' - 'drone'
tls_config: tls_config:
ca_file: /etc/prometheus/consul.crt ca_file: /etc/prometheus/consul-ca.crt
cert_file: /etc/prometheus/consul-client.crt cert_file: /etc/prometheus/consul-client.crt
key_file: /etc/prometheus/consul-client.key key_file: /etc/prometheus/consul-client.key
@ -63,7 +63,7 @@ scrape_configs:
format: ['prometheus'] format: ['prometheus']
scheme: 'https' scheme: 'https'
tls_config: tls_config:
ca_file: /etc/prometheus/nomad.crt ca_file: /etc/prometheus/nomad-ca.crt
cert_file: /etc/prometheus/nomad-client.crt cert_file: /etc/prometheus/nomad-client.crt
key_file: /etc/prometheus/nomad-client.key key_file: /etc/prometheus/nomad-client.key
insecure_skip_verify: true insecure_skip_verify: true
@ -72,6 +72,6 @@ scrape_configs:
services: services:
- 'nomad-client' - 'nomad-client'
tls_config: tls_config:
ca_file: /etc/prometheus/consul.crt ca_file: /etc/prometheus/consul-ca.crt
cert_file: /etc/prometheus/consul-client.crt cert_file: /etc/prometheus/consul-client.crt
key_file: /etc/prometheus/consul-client.key key_file: /etc/prometheus/consul-client.key

10
cluster/prod/app/telemetry/deploy/telemetry.hcl → cluster/prod/app/telemetry/deploy/telemetry-service.hcl
View file

@ -1,4 +1,4 @@
job "telemetry" { job "telemetry-service" {
datacenters = ["neptune", "bespin"] datacenters = ["neptune", "bespin"]
type = "service" type = "service"
@ -40,8 +40,8 @@ job "telemetry" {
} }
template { template {
data = "{{ key \"secrets/consul/consul.crt\" }}" data = "{{ key \"secrets/consul/consul-ca.crt\" }}"
destination = "secrets/consul.crt" destination = "secrets/consul-ca.crt"
} }
template { template {
@ -55,8 +55,8 @@ job "telemetry" {
} }
template { template {
data = "{{ key \"secrets/nomad/nomad.crt\" }}" data = "{{ key \"secrets/nomad/nomad-ca.crt\" }}"
destination = "secrets/nomad.crt" destination = "secrets/nomad-ca.crt"
} }
template { template {