首页 > 解决方案 > 可以将 Consul 服务发现配置为使用 TLS 吗?

问题描述

更新我可能已经找到了答案。明天试试:https ://stackoverflow.com/a/63356229/609290

我一直在用 Consul 修补 Prometheus 服务发现。

我能够发现和抓取 HTTP 端点,但我无法辨别是否可以将 Prometheus 配置为使用带目标的 TLS,并希望得到指导。

在此处输入图像描述

schemetls_config属性似乎将Prometheus配置为对 Consul 代理使用 TLS(我更愿意继续对 Consul 使用 HTTP)。

docker-compose.yml

version: "3"

services:
  consul:
    restart: always
    image: consul:1.10.0-beta
    container_name: consul
    expose:
    - "8500" # HTTP API|UI
    ports:
    - 8500:8500/tcp

  prometheus:
    restart: always
    depends_on:
      - consul
    image: prom/prometheus:v2.26.0
    command:
      - --config.file=/etc/prometheus/prometheus.yml
      - --web.enable-lifecycle
    volumes:
      - ${PWD}/prometheus.yml:/etc/prometheus/prometheus.yml
    expose:
      - "9090"
    ports:
      - 9099:9090

和:

prometheus.yml

global:
  scrape_interval: 1m
  evaluation_interval: 1m

scrape_configs:
  # Consul: Cloud Run
  - job_name: cloud-run
    consul_sd_configs:
      - server: consul:8500
        datacenter: dc1
        services:
          - "cloud-run-01"
          - "cloud-run-02"

我正在尝试配置cloud-run-xx为在 Google Cloud Run 上使用受 TLS 保护的端点:

curl \
--request \
GET http://localhost:8500/v1/agent/services
{
    "cloud-run-01": {
        "ID": "cloud-run-01",
        "Service": "cloud-run-01",
        "Tags": [
            "foo",
            "bar"
        ],
        "Meta": {},
        "Port": 443,
        "Address": "node-exporter-01-mvgi2eemha-uw.a.run.app",
        "Weights": {
            "Passing": 1,
            "Warning": 1
        },
        "EnableTagOverride": false,
        "Datacenter": "dc1"
    },
    "cloud-run-02": {
        "ID": "cloud-run-02",
        "Service": "cloud-run-02",
        "Tags": [
            "foo",
            "bar"
        ],
        "Meta": {},
        "Port": 443,
        "Address": "node-exporter-02-mvgi2eemha-uw.a.run.app",
        "Weights": {
            "Passing": 1,
            "Warning": 1
        },
        "EnableTagOverride": false,
        "Datacenter": "dc1"
    }
}

标签: prometheus

解决方案


推荐阅读