Cloudera Docs

Secure Prometheus for Streams Messaging Manager

Streams Messaging Manager supports connecting to Prometheus servers behind a TLS proxy (for example, Nginx).

You can connect to Prometheus servers behind a TLS proxy in the following scenarios:
  • TLS

    Streams Messaging Manager verifies the proxy’s certificate.

  • TLS with basic authentication

    Streams Messaging Manager verifies the proxy’s certificate and authenticates itself with username and password.

  • mTLS

    Streams Messaging Manager verifies the proxy’s certificate and authenticates itself with its TLS Certificate (TLS proxy should recognize it).