[
https://issues.apache.org/jira/browse/KUDU-3693?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Marton Greber reassigned KUDU-3693:
-----------------------------------
Assignee: Marton Greber
> Prometheus endpoint auth
> ------------------------
>
> Key: KUDU-3693
> URL: https://issues.apache.org/jira/browse/KUDU-3693
> Project: Kudu
> Issue Type: Sub-task
> Reporter: Marton Greber
> Assignee: Marton Greber
> Priority: Major
>
> Prometheus does not support SPNEGO therefore it is necessary to figure out a
> solution that we can offer on secure deployments.
> Below are some options outlined:
> - have the prometheus endpoints have an auth on/off flag (in Impala if I've
> read correctly there is no security check for the metrics endpoints:
> https://github.com/apache/impala/blob/0cd240a1cbd25ef097f392cbc02a70ad0b5f11d6/fe/src/test/java/org/apache/impala/customcluster/LdapWebserverTest.java#L210-L213)
> - Use bearer token (Ozone does this as well:
> https://ozone.apache.org/docs/edge/feature/observability.html?utm_source=chatgpt.com
> )
> - Provide info how to setup with Knox in front of Kudu.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
