Security

  • At the moment Prometheus doesn't offer any support for authentication or encryption (TLS) on the server components
    • They argue that they're focussing on building a monitoring solution. and want to avoid having to implement complex security features
    • You can still enable authentication and TLS, using a reverse proxy
  • This is only valid for server components, prometheus can scrape TLS and authentication enabled targets
    • See tls_config in the prometheus configuration to configure a CA certificate, user certificate and user key
    • You'd still need to setup a reverse proxy for the targets itself
  • No labels

0 Comments

You are not logged in. Any changes you make will be marked as anonymous. You may want to Log In if you already have an account.
CAPTCHA image