Remote access to the metrics port seems broken

Report from @tzapu:

got a problem with teku that seems eerily similar to one i had with eth2signer ( https://github.com/PegaSysEng/eth2signer/issues/97 ) i’m running with

|       --metrics-enabled=true                                                                                                                                                    
│       --metrics-port=8008                                                                                                                                                       
│       --metrics-interface=0.0.0.0                                                                                                                                               
│       --metrics-host-allowlist=localhost, 127.0.0.1                                                                                                                             

but getting server returned HTTP status 403 Forbidden when trying to connect from outside the pod. seeing that i am getting 403 the port must be right.

I’ve also had truble with this. Using the options --metrics-enabled=true --metrics-host-allowlist='*' --rest-api-docs-enabled=true --rest-api-host-allowlist='*' I can access the RPC port remotely (5051), but get a 403 from the metrics port (8008), which is unexpected. Explicitly putting my remote host’s IP address in the allow list does not help.

Local access is working OK for me with the above options.

[cemozerr]

My pleasure! Will keep the issue on until we figure @benjaminion’s issue as well, but glad you figured it out.

[cemozerr]

@benjaminion seems like, for your case, you were missing the --metrics-interface=0.0.0.0, which would have made Teku metrics visible to remote hosts. The only reason Rest API worked without --rest-api-interface=0.0.0.0, is because of this issue we apparently have: https://github.com/PegaSysEng/teku/issues/2213. So if you provide those flags, your metrics should be accessible from remote hosts. Closing this issue as I’m pretty sure that will fix your problem, but let me know and we can open it up again.