Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[prometheus-mysql-exporter] How do I provide SSL to MySQL connection #5176

Open
deem1978 opened this issue Jan 15, 2025 · 1 comment
Open

Comments

@deem1978
Copy link

Hello,
the issue is related to #491. The problem is that the link provided point to

# Extra Volume Mounts for the mysql exporter container
extraVolumeMounts: []
# - name: example
#   mountPath: /example

Could someone provide some explanation about how use SSL (or set the skip-verify flag) in values.yaml?
Thanks a lot to anyone wo will have a look into it.

@zeritti
Copy link
Contributor

zeritti commented Jan 15, 2025

If you wish to disable certificate verification, you can use config.extraArgs like this (General Flags):

config:
  extraArgs:
    - "--tls.insecure-skip-verify"

Better still, having the server's CA certificate, you should be able, for example, to

  • put the CA certificate in a configmap under key ca.crt
  • set
mysql:
  additionalConfig:
    - "ssl-ca=/tls/private/ca.crt"
  • use extraVolumes and extraVolumeMounts for the configmap so that the key's value can get mounted at /tls/private/ca.crt, e.g.
extraVolumes:
  - name: mysqlca
    configMap:
      name: mysqlca
extraVolumeMounts:
  - name: mysqlca
    mountPath: /tls/private
    readOnly: true

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants