Given these caveats, the simplest configuration is to share a “name” and CA across all certificates used for the exporter endpoints:

Choose a single arbitrary name to use for the tls_config.server_name (for example, metrics.gitlab).
Add that name to the SAN list for each certificate used to TLS encrypt the exporter endpoints.
Issue all certificates from the same CA:
Add the CA certificate as a cluster secret.
Mount that secret into the Prometheus server container using the Prometheus chart’s extraSecretMounts: configuration.
Set that as the tls_config.ca_file for the Prometheus scrape_config.

яндекс тарков

{ลิงก์ถูกลบแล้ว}https://www.donationalerts.com/r/wbydc

Веня покинул(а) группу

эта страничка защищена античитом VAC

его никогда не будут принимать за его личное мнение и индивидуальность