[WIP] cluster: Secure cluster traffic via mutual TLS#1819
[WIP] cluster: Secure cluster traffic via mutual TLS#1819mxinden wants to merge 1 commit intoprometheus:mainfrom
Conversation
Use github.com/mxinden/memberlist-tls-transport to optionally secure the Alertmanager cluster traffic via mutual tls. Signed-off-by: Max Leonard Inden <IndenML@gmail.com>
| p.setInitialFailed(resolvedPeers, bindAddr) | ||
| } | ||
|
|
||
| // TODO: Don't just dereference. |
There was a problem hiding this comment.
We're handling all this differently in the node exporter tls stuff, which you should probably vendor/hack in here to keep things in line
There was a problem hiding this comment.
For sure. I will align this once prometheus/node_exporter#1277 is merged.
|
@mxinden Do you plan to pick this back up? If not, I would like to. Thanks! |
|
@hooten I have no plans to work on this, but I am more than happy to answer any questions in case you would like to continue the effort. Would be great to see this in As far as I am aware this is still aligned with the Alertmanager roadmap. I am //CCing @simonpasquier here just to make sure. |
|
@hooten Love to pair with you on this :) |
|
With #2237 merged, I am closing here. |
4 participants
Use github.com/mxinden/memberlist-tls-transport to optionally secure the
Alertmanager cluster traffic via mutual tls.
This is an early work-in-progress version, but one can already test it out locally. I added everything to get up and running quickly:
go get -u github.com/cloudflare/cfssl/cmd/...cd examples/ha/tls/ && make start