This message was deleted.
# k3s
a
This message was deleted.
w
When I try to curl this node in my tailnet from another node I am not able to get any metrics
Copy code
]$ curl --cacert ./ca.crt   -H "Authorization: Bearer $(cat ./kube-sa-token)"   <https://100.71.124.99:10259/metrics>
curl: (60) SSL: no alternative certificate subject name matches target host name '100.71.124.99'
More details here: <https://curl.se/docs/sslcerts.html>

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
even if I try to run it on the same node I am not able to get the metrics but If I run the same command on loopback, it works
Copy code
]$ curl --cacert ./ca.crt   -H "Authorization: Bearer $(cat ./kube-sa-token)"   <https://127.0.0.1:10259/metrics>

works
Also other endpoints which appear to be up in prometheus image attached are accessible using this curl command with tailnet IP
It would be really helpful if someone can guide me related to this.
c
You don't need to scrape them all separately. K3s runs all the components together in one process, so all the component metrics are available on all metrics ports. You already have all the metrics you need.
w
ohh is that the case.
does that mean that the combined metrics from any worker node is exported with cadvisor on port 10250?
Then I wont need to bind these to 0.0.0.0 anyway