Uploaded image for project: 'OpenShift Windows Containers'
  1. OpenShift Windows Containers
  2. WINC-1269

WMCO /metrics endpoint should be exposed via HTTPS

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Major Major
    • WMCO 10.17.0
    • None
    • None
    • 3
    • False
    • None
    • False

      Description

      We are currently exposing a metrics server within the WMCO pod.
      We need to ensure that the metrics endpoint of WMCO does not transmit plaintext data.

      kube-rbac-proxy can be used to secure the server.
      https://github.com/openshift/windows-machine-config-operator/blob/e872eecec22f31dbb8942912cb7afc42d0923c67/config/rbac/kustomization.yaml#L14

      Acceptance Criteria

      • WMCO metrics endpoint requires TLS

            Unassigned Unassigned
            rh-ee-ssoto Sebastian Soto
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: