#88 Get Vault metrics

Author: vityaman

backend/.gitignore

@@ -37,5 +37,8 @@ build/
 *.srl
 *.jks
 
+# Secrets
+*.token.txt
+
 # Java
 *.hprof

backend/prometheus/Dockerfile

@@ -2,6 +2,8 @@ FROM prom/prometheus:latest
 
 COPY ./prometheus.yml /etc/prometheus/prometheus.yml
 
+COPY ./vault.token.txt /etc/prometheus/vault.token.txt
+
 CMD [ \
     "--config.file=/etc/prometheus/prometheus.yml", \
     "--storage.tsdb.retention.size=500MB", \

backend/prometheus/prometheus.yml

@@ -72,3 +72,18 @@ scrape_configs:
           - consul-exporter.dating.se.ifmo.ru
         type: 'A'
         port: 9107
+
+  - job_name: vault
+    metrics_path: /v1/sys/metrics
+    params:
+      format: [ 'prometheus' ]
+    authorization:
+      credentials_file: /etc/prometheus/vault.token.txt
+    dns_sd_configs:
+      - names:
+          - vault.dating.se.ifmo.ru
+        type: 'A'
+        port: 8200
+    scheme: https
+    tls_config:
+      insecure_skip_verify: true

backend/vault/config/vault.hcl

@@ -10,6 +10,10 @@ listener "tcp" {
     tls_min_version     = "tls13"
 }
 
+telemetry {
+  prometheus_retention_time = "12h"
+}
+
 storage "consul" {
   address           = "server.dc1.consul:8501"
   max_parallel      = 32