Skip to content

Add TLS Support for Metrics Endpoint

Description

As part of the effort to enable TLS encryption between GitLab services - the metrics/debug endpoint for the Agent Server should be able to export metrics over https.

As part of working out the configuration needed for our in-chart Prometheus scrape configurations to support metrics exporter endpoints configured for TLS (see gitlab-org/charts/gitlab#3335+ ) - it looks like there's not currently configuration support to have the Agent Server metrics/debug endpoint make use of TLS.

Proposal

Implement configuration to allow for a certificate/key pair to be provided along with the observability.listen configuration and used to expose the metrics/debug using TLS.