kms: enable metrics by default

Author: kvinwang

kms/kms.toml

@@ -40,9 +40,9 @@ download_timeout = "2m"
 
 [core.metrics]
 # Expose unauthenticated Prometheus metrics on /metrics.
-# Keep disabled unless the KMS RPC listener is protected by network policy
+# Disable this if the KMS RPC listener is not protected by network policy
 # or another access-control layer.
-enabled = false
+enabled = true
 
 [core.auth_api]
 type = "webhook"

kms/src/config.rs

@@ -46,14 +46,12 @@ pub(crate) struct KmsConfig {
     /// agent socket.
     #[serde(default = "default_true")]
     pub enforce_self_authorization: bool,
-    #[serde(default)]
     pub metrics: MetricsConfig,
 }
 
-#[derive(Debug, Clone, Deserialize, Default)]
+#[derive(Debug, Clone, Deserialize)]
 pub(crate) struct MetricsConfig {
     /// Whether to expose the unauthenticated Prometheus `/metrics` endpoint.
-    #[serde(default)]
     pub enabled: bool,
 }