Refer https://gitlab.com/groups/gitlab-org/-/epics/7479 Some GitLab components (including the Rails monolith itself) serve metrics into Prometheus. These endpoints must be TLS-secured for FIPS compliance. 1. Inventory which endpoints report to Prometheus 1. Determine of those endpoints are already or can be TLS-secured 1. Secure each unsecured endpoint