def install_prometheus_certs(kubeconfig):
log.info("Fetching API client keys for Prometheus")
y = yaml.load(kubeconfig)
k = base64.b64decode(y['users'][0]['user']['client-key-data'])
with open('client_key', 'w') as f:
f.write(k.decode())
subprocess.check_call(["/usr/bin/sudo", "scp", "client_key",
PROMETHEUS_SSH + ":/srv/prometheus/prometheus/kube_api_client_key"])
c = base64.b64decode(y['users'][0]['user']['client-certificate-data'])
with open('client_cert', 'w') as f:
f.write(c.decode())
subprocess.check_call(["/usr/bin/sudo", "scp", "client_cert",
PROMETHEUS_SSH + ":/srv/prometheus/prometheus/kube_api_client_cert"])
log.info("Reloading Prometheus")
subprocess.check_call(["/usr/bin/sudo", "ssh", PROMETHEUS_SSH, "/usr/bin/systemctl", "reload", "prometheus.service"])
评论列表
文章目录