Comment 2 for bug 2041167

One advantage of leveraging cos-agent is that we can limit the listen address of the exporter to localhost.

Currently the port is open to everywhere so anybody who has network connectivity can get all the metrics of Ceph.

$ sudo ss -tlnp | grep mgr
LISTEN 0 512 192.168.151.109:6800 0.0.0.0:* users:(("ceph-mgr",pid=14161,fd=27))
LISTEN 0 512 192.168.151.109:6801 0.0.0.0:* users:(("ceph-mgr",pid=14161,fd=28))
LISTEN 0 5 192.168.151.109:8443 0.0.0.0:* users:(("ceph-mgr",pid=14161,fd=36))
LISTEN 0 5 *:9283 *:* users:(("ceph-mgr",pid=14161,fd=33))

ref: https://docs.ceph.com/en/quincy/mgr/prometheus/#configuration