remote write mTLS

[Victor Borisik]

I'm trying to set up Prometheus-to-Prometheus metrics flow, I was able to do it by flag --enable-feature=remote-write-receiver.

However I need to have mTLS there, can someone advice a manual or post a config sample?

Appreciate you help

[Brian Candler]

At the receiving side: https://prometheus.io/docs/prometheus/latest/configuration/https/

(i.e. you need "tls_server_config" in a separate web.config.file)

Or you can sit prometheus behind a reverse proxy that terminates TLS.

At the sending side: 

https://prometheus.io/docs/prometheus/latest/configuration/configuration/#remote_write

https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config
(i.e. you need a https url and a "tls_config" section under the remote write block)