Prometheus Security and Authentication explained

[This tutorial is under developement]

Prometheus does not directly support basic authentication (aka “basic auth”) for connections to the Prometheus expression browser and HTTP API.

If you’d like to enforce basic auth for those connections, we recommend using Prometheus in conjunction with

A reverse proxy and applying authentication at the proxy layer using nginx
A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS
A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS

A reverse proxy and applying authentication at the proxy layer using nginx

A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS

A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS

Reference
– https://prometheus.io/docs/guides/basic-auth/
– https://prometheus.io/docs/operating/security/
– https://prometheus.io/docs/operating/security/#authentication-authorization-and-encryption

Author
Recent Posts

Rajesh Kumar

DevOps Architect - Mentor - Coach - Trainer at Cotocus

Email - DevOps@RajeshKumar.xyz
CV - www.RajeshKumar.xyz
Linkedin - https://www.linkedin.com/in/rajeshkumarin/

Total, Over 15 years of extensive experience working with more than 8 software MNCs for software development/maintenance and production environments involved in continuous improvement and automating entire life cycle using latest devops tools and techniques from design and architecture, through implementation, deployment, and successful operations. Also, helping more than 70 software organizations globally, providing coaching, mentoring and consulting in devops, CICD, cloud, containers and operations.

I help software organization to improve a quality of the software, reducing the software development/operational cost and immediate feedback/monitoring. Have in-depth working experience in following domains with real project implementation.

- Test Driven DevOps Approach
- Continuous Integration
- Continuous Delivery
- Continuous Deployment
- Continuous Inspection
- Technical Debt Reduction
- Containerization/Micro Services Using Kubernetes & Docker
- Cloud Migration using AWS
- Production Monitoring & Postmortem