Metric collection is very important for modern systems. Systems like Prometheus have risen in prominence due to their very easy to stand up and reliable exporters. Its just HTTP + text file. For security though, it really should be HTTPS + text file. That is normally hard, but could be very easy, if SPIFFE/SPIRE was used for certificate issuance. Support for only the allowed scraper could also easily be added for increased security of the metrics.
Metric collection is very important for modern systems. Systems like Prometheus have risen in prominence due to their very easy to stand up and reliable exporters. Its just HTTP + text file. For security though, it really should be HTTPS + text file. That is normally hard, but could be very easy, if SPIFFE/SPIRE was used for certificate issuance. Support for only the allowed scraper could also easily be added for increased security of the metrics.