Contributor
Naman Lakhwani

Automated, Granular TLS client support in Thanos


Mentors
Kemal Akkoyun, Bartlomiej Plotka
Organization
CNCF

Thanos Querier component supports basic TLS configuration for internal gRPC communication. This works great for basic use cases but it still requires extra forward proxies to make it work for bigger deployments. It’s also hard to rotate certificates automatically and configure safe mTLS. This project aims to remove those simplifications allowing better TLS story for all Thanos metrics APIs!