Prometheus Security and Authentication explained

[This tutorial is under developement]

Prometheus does not directly support basic authentication (aka “basic auth”) for connections to the Prometheus expression browser and HTTP API.

If you’d like to enforce basic auth for those connections, we recommend using Prometheus in conjunction with

  • A reverse proxy and applying authentication at the proxy layer using nginx
  • A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS
  • A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS

A reverse proxy and applying authentication at the proxy layer using nginx

A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS

A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS

Reference
– https://prometheus.io/docs/guides/basic-auth/
– https://prometheus.io/docs/operating/security/
– https://prometheus.io/docs/operating/security/#authentication-authorization-and-encryption

Rajesh Kumar
Follow me