Hi, Thanks for your response.
So as you mentioned any passwords mentioned in prometheus config should not be visible outside from UI or api. Correct?. example http://demo.robustperception.io:9090/config I am using docker containers. On Saturday, March 27, 2021 at 6:04:51 PM UTC+5:30 Julien Pivotto wrote: > If the password is visible from the prometheus UI or API's that is a major > security issue. > > If the password is present in the Prometheus configuration file, that is > not a security issue because you can protect it with your operating system > abilities. > > Can you please clarify? Thanks. > > Le sam. 27 mars 2021 à 13:05, Amit Das <[email protected]> a écrit : > >> Hi, >> >> I am looking for getting the metrics behind basic auth from url like >> 192.16.10.8/metrics (with nginx auth). >> >> I see i can do that by adding username and password in the prometheus.yml >> job. >> >> Prometheus URL is accessible to everyone internaly and can see the >> password from the config. >> From security perspective this is not good. >> Can you please suggest the best approach to get metrics with basic auth >> without leaking credentials like from prometheus url. >> >> Thanks >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Prometheus Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/prometheus-users/429f1aa1-7f2e-40ea-9a13-4b574d05b2c6n%40googlegroups.com >> >> <https://groups.google.com/d/msgid/prometheus-users/429f1aa1-7f2e-40ea-9a13-4b574d05b2c6n%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/ed8370ad-1e60-4ae3-aa9c-bc0e7e2a2e2bn%40googlegroups.com.
