I'd only reverse-proxy the requests that start with http://pushgateway.example.org:9091/metrics/team/ to the client, and return 404 or 503 otherwise.
On 24 May 03:23, Алексей Широких wrote: > Yep, I can. And I thought about it. > But that will not give any feedback to the user that sends data. > The request will be accepted, and from a user point of view, it must be > handled > > I was thinking about a way how to give a quick response, like sending 400 > errors. > понедельник, 24 мая 2021 г. в 12:18:40 UTC+2, Brian Brazil: > > > On Mon, 24 May 2021 at 11:14, Алексей Широких <[email protected]> wrote: > > > >> Hello, we have a problem with the Pushgateway. > >> Almost everyone can send metrics to it, and we can't enforce any policies > >> on data ingest. > >> We have an internal agreement that all metrics must have at least a team > >> label or, better have team and product labels. > >> > >> I was thinking about filtering data on Nginx proxy, but I can see that > >> labels can be set in URL or post data. It will be tricky to make such > >> filtering work as expected. > >> > >> Nay ideas on how to enforce that kind of policy? > > > > > > You could drop any metrics without that label at scrape time with > > metric_relabel_configs. > > > > -- > > Brian Brazil > > www.robustperception.io > > > > -- > You received this message because you are subscribed to the Google Groups > "Prometheus Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-users/08e1bdd0-d919-4a6f-9fcf-40b727457f75n%40googlegroups.com. -- Julien Pivotto @roidelapluie -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/20210524121227.GA363887%40oxygen.
