kevinveenbirkenbachandClaude Opus 5.5 a758ce71f9 fix(web-app-prometheus): pick each probe target's module by its own TLS mode ...

While the private CA is missing from the prometheus stack, a self-signed
target has to use http_ready_private_ca. The blackbox job chose that
module once per application from lookup('tls', app, 'mode'), which aligns
to one sibling domain. For web-app-docs that sibling was the onion domain
(TLS off), so its clearnet https target kept the verifying http_ready and
failed with "x509: certificate signed by unknown authority" (CI run
40131272595: n8n#1, and hidden behind the first failure in API#1 and
Mattermost#1).

Every served domain now gets its own target group whose module follows
lookup('tls', probe_domain, 'mode'). Series labels are unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-25 12:57:11 +01:00

..

__init__.py

…

test_blackbox_ready_module.py

…

test_blackbox_targets.py

fix(web-app-prometheus): pick each probe target's module by its own TLS mode

2026-10-25 12:57:11 +01:00