Fluentbit: mTLS Metrics

Package Merge Request

Package Changes

Adds tlsConfig/scheme to support mTLS metrics for Fluentbit.

Package MR

https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/merge_requests/85

For Issue

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit/-/issues/44

chart/templates/logging/fluentbit/values.yaml

@@ -121,6 +121,18 @@ serviceMonitor:
   scrapeTimeout: 10s
   selector:
     prometheus: monitoring-monitoring-kube-prometheus
+  # conditional passes only if all conditionals are true:
+  # - istio: enabled
+  # - mTLS: SCRICT
+  # - istio injection: enabled (for logging ns)
+  {{- if and .Values.istio.enabled (eq (dig "istio" "mtls" "mode" "STRICT" .Values.fluentbit.values) "STRICT") (eq (dig "istio" "injection" "enabled" .Values.logging.values) "enabled") }}
+  scheme: https
+  tlsConfig:
+    caFile: /etc/prom-certs/root-cert.pem
+    certFile: /etc/prom-certs/cert-chain.pem
+    keyFile: /etc/prom-certs/key.pem
+    insecureSkipVerify: true  # Prometheus does not support Istio security naming, thus skip verifying target pod certificate
+  {{- end }}
 
 dashboards:
   enabled: true