Skip to content

Add HTTPS Certificate to prombench.prometheus.io#777

Merged
kakkoyun merged 3 commits into
prometheus:masterfrom
Vandit1604:add-tls-cert-to-prombench.prometheus.io
Feb 20, 2025
Merged

Add HTTPS Certificate to prombench.prometheus.io#777
kakkoyun merged 3 commits into
prometheus:masterfrom
Vandit1604:add-tls-cert-to-prombench.prometheus.io

Conversation

@Vandit1604

Copy link
Copy Markdown
Contributor

Fixes #724

This PR aims to add an HTTPS certificate for prombench.prometheus.io using Cert-Manager and Let's Encrypt. Testing the setup locally has proven challenging. Here’s a summary of the modifications and approaches tried so far:

  • Updated the Nginx Service type to NodePort from LoadBalancer for easier local access.
  • Changed the Prometheus Service type to ClusterIP with Ingress managing external access.
  • Configured the Ingress resource to handle TLS with the prombench-prometheus-tls secret for HTTPS.
  • Modified /etc/hosts to map prombench.prometheus.io to 127.0.0.1 but it worked when I mapped it to Node IP and add the Host in the header when testing to
  • Successfully triggered and verified the ACME HTTP-01 challenge by adding the node IP to /etc/hosts, but the challenge does not get solved automatically with the manifest setup.

I’d appreciate any guidance on how to test this locally. The Issue was because of DNS since after mapping in /etc/hosts I was able to solve the challenge(Tested via curl)
If there's a better way to test this locally. Please let me know.
Thank you!

Signed-off-by: Vandit Singh <vanditsinghkv@gmail.com>
@Vandit1604

Copy link
Copy Markdown
Contributor Author

Does this PR require some changes?
Let me know if it does.

gentle ping @bboreham

@kakkoyun
kakkoyun requested a review from bboreham November 28, 2024 13:05
Comment thread prombench/manifests/cert-manager/1c_issuer.yaml Outdated
Co-authored-by: Ben Kochie <superq@gmail.com>
Signed-off-by: Vandit Singh <107131545+Vandit1604@users.noreply.github.com>
Comment thread prombench/manifests/cert-manager/1c_issuer.yaml Outdated
Co-authored-by: Ben Kochie <superq@gmail.com>
Signed-off-by: Vandit Singh <107131545+Vandit1604@users.noreply.github.com>
@kakkoyun
kakkoyun merged commit 2fb3b53 into prometheus:master Feb 20, 2025
@Vandit1604
Vandit1604 deleted the add-tls-cert-to-prombench.prometheus.io branch February 23, 2025 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add https certificate for http://prombench.prometheus.io/

3 participants