From fcba927d7b989cea8398b461da7363ceee3f14bc Mon Sep 17 00:00:00 2001 From: k-s-dean Date: Tue, 24 May 2022 15:26:42 +0100 Subject: [PATCH] talk TLS to openstack exporter via haproxy Closes-Bug: #1975598 Change-Id: If4c85f8e960141d08a89accdc11a3271f31974c1 --- ansible/roles/prometheus/templates/prometheus.yml.j2 | 3 +++ .../notes/fix-openstack-exporter-tls-bug-1975598.yml | 8 ++++++++ 2 files changed, 11 insertions(+) create mode 100644 releasenotes/notes/fix-openstack-exporter-tls-bug-1975598.yml diff --git a/ansible/roles/prometheus/templates/prometheus.yml.j2 b/ansible/roles/prometheus/templates/prometheus.yml.j2 index cd36d72880..1346badb2e 100644 --- a/ansible/roles/prometheus/templates/prometheus.yml.j2 +++ b/ansible/roles/prometheus/templates/prometheus.yml.j2 @@ -97,6 +97,9 @@ scrape_configs: - job_name: openstack_exporter scrape_interval: {{ prometheus_openstack_exporter_interval }} scrape_timeout: {{ prometheus_openstack_exporter_timeout }} +{% if kolla_enable_tls_internal | bool %} + scheme: https +{% endif %} honor_labels: true static_configs: - targets: diff --git a/releasenotes/notes/fix-openstack-exporter-tls-bug-1975598.yml b/releasenotes/notes/fix-openstack-exporter-tls-bug-1975598.yml new file mode 100644 index 0000000000..27c7da33cc --- /dev/null +++ b/releasenotes/notes/fix-openstack-exporter-tls-bug-1975598.yml @@ -0,0 +1,8 @@ +--- +fixes: + - | + Fixes an issue where the prometheus server does not + talk via https to openstack exporter via haproxy + when TLS is enable on the internal endpoints. + `LP#[1975598] + `__