Hi Redouane, Am 15.09.26 um 12:43 PM schrieb Redouane Kachach:
When mgmt-gateway is deployed, direct external access to Grafana/ Prometheus is intentionally disabled. The monitoring services are expected to be accessed/routed through mgmt-gateway. That's the whole point behind the mgmt-gateway design. Client certs are required bcz when the mgmt-gateway is deployed strict mTLS is enforced for service-to-service communication.
I understand. We did not try to access them directly but through the service IP of the mgmt-gateway service. Grafana was not displaying the metrics and when investigating further we found timeouts that pointed to mTLS client certificates. I will try to reproduce the setup in a test cluster. Regards -- Robert Sander Linux Consultant Heinlein Consulting GmbH Schwedter Str. 8/9b, 10119 Berlin https://www.heinlein-support.de Tel: +49 30 405051 - 0 Fax: +49 30 405051 - 19 Amtsgericht Berlin-Charlottenburg - HRB 220009 B Geschäftsführer: Peer Heinlein - Sitz: Berlin