Add tls support for mongodb connections

Author: MemberIT

config/types.go

@@ -12,6 +12,7 @@ type ApplicationInstrumentation struct {
 	Type        string            `json:"type"`
 	Host        string            `json:"host"`
 	Port        string            `json:"port"`
+	Sni         string            `json:"sni"`
 	Credentials Credentials       `json:"credentials"`
 	Params      map[string]string `json:"params"`
 	Instance    string            `json:"instance"`

metrics/mongo/mongo.go

@@ -2,6 +2,7 @@ package mongo
 
 import (
 	"context"
+	"crypto/tls"
 	"fmt"
 	"sort"
 	"strings"
@@ -62,7 +63,7 @@ type Collector struct {
 	prevSettingsText string
 }
 
-func New(host, username, password string, scrapeInterval, collectTimeout time.Duration,
+func New(host, username, password, tlsOpt string, sni string, scrapeInterval, collectTimeout time.Duration,
 	logger logger.Logger, emitter dbtracker.ChangeEmitter, targetAddr string,
 	maxTablesPerDB int, trackSizes bool) *Collector {
 
@@ -90,6 +91,12 @@ func New(host, username, password string, scrapeInterval, collectTimeout time.Du
 			Password: password,
 		})
 	}
+	if tlsOpt == "true" {
+		c.clientOpts.SetTLSConfig(&tls.Config{
+			ServerName: sni,
+			MinVersion: tls.VersionTLS12,
+		})
+	}
 	trackSchema := c.emitter != nil
 	if trackSchema || trackSizes {
 		c.dbTracker = newDatabaseTracker(maxTablesPerDB, trackSchema, trackSizes, logger)

metrics/target.go

@@ -47,6 +47,7 @@ type CredentialsSecret struct {
 type Target struct {
 	Type              TargetType
 	Addr              string
+	Sni               string
 	Credentials       Credentials
 	CredentialsSecret CredentialsSecret
 	Params            map[string]string
@@ -152,10 +153,17 @@ func (t *Target) StartExporter(reg *prometheus.Registry, credentials Credentials
 		t.stop = func() {}
 
 	case TargetTypeMongodb:
+		sni := t.Sni
+		tlsParam := t.Params["tls"]
+		if tlsParam == "" {
+			tlsParam = "false"
+		}
 		collector := mongo.New(
 			t.Addr,
 			credentials.Username,
 			credentials.Password,
+			tlsParam,
+			sni,
 			scrapeInterval,
 			collectTimeout,
 			t.logger,
@@ -198,6 +206,7 @@ func TargetFromConfig(i config.ApplicationInstrumentation) *Target {
 	t := &Target{
 		Type: TargetType(i.Type),
 		Addr: net.JoinHostPort(i.Host, i.Port),
+		Sni:  i.Sni,
 		Credentials: Credentials{
 			Username: i.Credentials.Username,
 			Password: i.Credentials.Password,
@@ -277,6 +286,7 @@ func TargetFromPod(pod *k8s.Pod) *Target {
 		t = &Target{
 			Type: TargetTypeMongodb,
 			Addr: net.JoinHostPort(pod.IP, cmp.Or(pod.Annotations["coroot.com/mongodb-scrape-port"], "27017")),
+			Sni:  pod.Id.Name,
 			Credentials: Credentials{
 				Username: pod.Annotations["coroot.com/mongodb-scrape-credentials-username"],
 				Password: pod.Annotations["coroot.com/mongodb-scrape-credentials-password"],
@@ -287,6 +297,9 @@ func TargetFromPod(pod *k8s.Pod) *Target {
 				UsernameKey: pod.Annotations["coroot.com/mongodb-scrape-credentials-secret-username-key"],
 				PasswordKey: pod.Annotations["coroot.com/mongodb-scrape-credentials-secret-password-key"],
 			},
+			Params: map[string]string{
+				"tls": pod.Annotations["coroot.com/mongodb-scrape-param-tls"],
+			},
 		}
 	}