Problem - what in Jaeger blocks you from solving the requirement?

Jaeger currently exposes the metrics via the main query endpoint, which might be exposed to the public internet. Ideally, the /metrics endpoint would be directed to the internal, admin-only port that is used by the health-check handler.

$ docker run -p 16686:16686 --rm jaegertracing/all-in-one:1.9 
$ curl localhost:16686/metrics