prometheus client certificates

tasks/all.yml

@@ -8,7 +8,7 @@
     name: prometheus
     state: started
     enabled: yes
-- name: promtheus template
+- name: prometheus template
   template:
     src: prometheus.yml.j2
     dest: /etc/prometheus/prometheus.yml

templates/prometheus.yml.j2

@@ -43,6 +43,15 @@ scrape_configs:
     static_configs:
       - targets: ['localhost:9100']
   - job_name: dns_scrape
+    scheme: https
+    tls_config:
+        # Prometheus will check that the node_exporter presents a certificate
+        # signed by this ca.
+        ca_file: '/etc/ssl/prometheus_client/root.ca.crt'
+        # The cert and key are presented to node_exporter to authenticate
+        # Prometheus as a client.
+        cert_file: '/etc/ssl/prometheus_client/{{ansible_fqdn}}.crt'
+        key_file: '/etc/ssl/prometheus_client/{{ansible_fqdn}}.key'
     dns_sd_configs:
     - names: 
       - '{{datacenter}}'