Ok this gets complicated. cephadm doesn't support SSL at this point. See https://bugzilla.redhat.com/show_bug.cgi?id=1994251 cephadm doesn't support deploying additional files for existing daemon types. See https://prometheus.io/docs/guides/basic-auth/#creating-web-yml and --- For now you can manually deploy your own Prometheus and Grafana. Does this help?
relates to https://bugzilla.redhat.com/show_bug.cgi?id=2028173
Support for the first part (basic auth) has been add by the following upstream PR: https://github.com/ceph/ceph/pull/46601. More changes are needed to make the authentication configurable.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat Ceph Storage 7.0 Bug Fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:7780