Re: [prometheus-developers] Multi-Tenant ACLs with Prometheus

2020-02-14 Thread Paul Traylor
I built this based on prom-label-proxy to support mapping basicAuth to a set of tenant label matchers https://github.com/kfdm/promql-guard On Sat, Feb 15, 2020 at 1:43 AM Simon Pasquier wrote: > > You can have a look at those 2 projects too: > https://github.com/hoffie/prometheus-filter-proxy > h

Re: [prometheus-developers] Multi-Tenant ACLs with Prometheus

2020-02-14 Thread Simon Pasquier
You can have a look at those 2 projects too: https://github.com/hoffie/prometheus-filter-proxy https://github.com/openshift/prom-label-proxy On Fri, Feb 14, 2020 at 4:13 PM Conrad Wood wrote: > > On Fri, 2020-02-14 at 15:58 +0100, Julius Volz wrote: > > On Fri, Feb 14, 2020 at 2:01 PM Conrad Woo

Re: [prometheus-developers] Multi-Tenant ACLs with Prometheus

2020-02-14 Thread Conrad Wood
On Fri, 2020-02-14 at 15:58 +0100, Julius Volz wrote: > On Fri, Feb 14, 2020 at 2:01 PM Conrad Wood > wrote: > > That is a good point, I did not consider that labels might have > > been > > aggregated away. Clearly that needs to be considered. > > > > However, the ACLEvaluator also needs to look

Re: [prometheus-developers] Multi-Tenant ACLs with Prometheus

2020-02-14 Thread Julius Volz
On Fri, Feb 14, 2020 at 2:01 PM Conrad Wood wrote: > That is a good point, I did not consider that labels might have been > aggregated away. Clearly that needs to be considered. > > However, the ACLEvaluator also needs to look at the label values once > the query returns(see Example 2). Or is the