ThanosRuler.spec.remoteWrite[].oauth2.tlsConfig.keySecret.spec.grpcServerTlsConfig
grpcServerTlsConfig defines the gRPC server from which Thanos Querier reads recorded rule data. Note: Currently only the `minVersion`, `caFile`, `certFile`, `keyFile`, `cipherSuites` and `curves` fields are supported.
| Field / Type | Description |
|---|---|
ca defines the Certificate authority used when verifying server certificates. | |
caFile | caFile defines the path to the CA cert in the Prometheus container to use for the targets. |
cert defines the Client certificate to present when doing client-authentication. | |
certFile | certFile defines the path to the client cert file in the Prometheus container for the targets. |
cipherSuites defines the list of supported cipher suites for TLS versions up to TLS 1.2. If not defined, the Go default cipher suites are used. Available cipher suites are documented in the Go documentation: https://golang.org/pkg/crypto/tls/#pkg-constants It requires Thanos >= v0.42.0. Note that the operator doesn't verify if the Thanos version supports the provided values.
| |
curves defines the list of preferred elliptic curves for TLS handshakes. If not defined, the Go default curves are used. Available curves are documented in the Go documentation: https://golang.org/pkg/crypto/tls/#CurveID It requires Thanos >= v0.42.0. Note that the operator doesn't verify if the Thanos version supports the provided values.
| |
insecureSkipVerify | insecureSkipVerify defines how to disable target certificate validation. |
keyFile | keyFile defines the path to the client key file in the Prometheus container for the targets. |
keySecret defines the Secret containing the client key file for the targets.
| |
maxVersion | maxVersion defines the maximum acceptable TLS version. It requires Prometheus >= v2.41.0 or Thanos >= v0.31.0.
|
minVersion | minVersion defines the minimum acceptable TLS version. It requires Prometheus >= v2.35.0 or Thanos >= v0.28.0.
|
serverName | serverName is used to verify the hostname for the targets. |