Automated, Granular TLS client support in Thanos
- Mentors
- Kemal Akkoyun, Bartlomiej Plotka
- Organization
- CNCF
Thanos Querier component supports basic TLS configuration for internal gRPC communication. This works great for basic use cases but it still requires extra forward proxies to make it work for bigger deployments. It’s also hard to rotate certificates automatically and configure safe mTLS. This project aims to remove those simplifications allowing better TLS story for all Thanos metrics APIs!