Default tls_config client settings for servicemonitors/podmonitors

[joke]

Hi,

I'm using istio with strict mTLS settings. Consequently the grafana agent needs to scrape the prometheus endpoints with special tls settings as described here.

The prometheus.scrape components allows specifying a tls_config block which can be used for this.

Unfortunately the neither servicemonitors nor podmonitors support this configuration. The client->tls_config is used for accessing the kubernetes api and the scrape block does not include a configurations options.

It would be possible to include all the tls configuration in each monitor specification but in addition to being quite repetitive certificate would need to be referenced as secrets instead of files.

Is there any possibility to specify an agent wide http client configuration or an other option to pass a default tls configuration to the scraping process?

Thanks in advance.

[tpaschalis]

Hey, thanks for bringing this to our attention 🙌

This is a good usecase for an enhancement, so I'd like to move this to an issue so we can properly keep track of it.

[tpaschalis]

If that's OK, I'll close out this discussion and we can continue on https://github.com/grafana/agent/issues/6239