strimzi kafka operator > cruise control metrices scraping over HTTPS

[kspmmitt]

hello,
using strimzi kafka operator and enabled cruise control. also having Prometheus server created via custom microservice.

http metrices scraping works fine but over https it is not working.

issue looks like - cruise control CA certificate signed by strimzi and Prometheus service is by another CA so that's y it is not working?

below output is from cruise control pod -

drwxrwsrwt 3 root 10000 140 Jul 30 09:15 cluster-ca-certs
drwxrwsrwt 3 root 10000 160 Jul 30 09:15 cc-certs

bash-4.4$ cd cluster-ca-certs/
bash-4.4$
bash-4.4$ ls -lrt
total 0
lrwxrwxrwx 1 root 10000 18 Jul 30 09:15 ca.password -> ..data/ca.password
lrwxrwxrwx 1 root 10000 13 Jul 30 09:15 ca.p12 -> ..data/ca.p12
lrwxrwxrwx 1 root 10000 13 Jul 30 09:15 ca.crt -> ..data/ca.crt
bash-4.4$
bash-4.4$ openssl x509 -in ca.crt -noout -issuer
issuer=O = io.strimzi, CN = cluster-ca v0

bash-4.4$ cd ../cc-certs/
bash-4.4$ ls -lrt
total 0
lrwxrwxrwx 1 root 10000 30 Jul 30 09:15 cruise-control.password -> ..data/cruise-control.password
lrwxrwxrwx 1 root 10000 25 Jul 30 09:15 cruise-control.p12 -> ..data/cruise-control.p12
lrwxrwxrwx 1 root 10000 25 Jul 30 09:15 cruise-control.key -> ..data/cruise-control.key
lrwxrwxrwx 1 root 10000 25 Jul 30 09:15 cruise-control.crt -> ..data/cruise-control.crt
bash-4.4$ openssl x509 -in cruise-control.crt -noout -issuer
issuer=O = io.strimzi, CN = cluster-ca v0

[scholzj]

We do not support HTTPS for any metric endpoints. You should use HTTP.