{"id":12643,"date":"2020-04-02T05:37:01","date_gmt":"2020-04-02T05:37:01","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=12643"},"modified":"2020-05-27T07:43:29","modified_gmt":"2020-05-27T07:43:29","slug":"prometheus-security-and-authentication-explained","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/prometheus-security-and-authentication-explained\/","title":{"rendered":"Prometheus Security and Authentication explained"},"content":{"rendered":"\n<p>[This tutorial is under developement]<\/p>\n\n\n\n<p>Prometheus does not directly support basic authentication (aka &#8220;basic auth&#8221;) for connections to the Prometheus expression browser and HTTP API. <\/p>\n\n\n\n<p>If you&#8217;d like to enforce basic auth for those connections, we recommend using Prometheus in conjunction with <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>A reverse proxy and applying authentication at the proxy layer using nginx<\/li><li>A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS<\/li><li>A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS<\/li><\/ul>\n\n\n\n<p><strong>A reverse proxy and applying authentication at the proxy layer using nginx<\/strong><\/p>\n\n\n\n<script src=\"https:\/\/gist.github.com\/devops-school\/8936204da3933299e4d3d4c6b6071cb5.js\"><\/script>\n\n\n\n<p><strong>A reverse proxy and applying authentication at the proxy layer using nginx and one way TLS<\/strong><\/p>\n\n\n\n<script src=\"https:\/\/gist.github.com\/devops-school\/d3188343014a11e54bc8b00d0a42f3c9.js\"><\/script>\n\n\n\n<p><strong>A reverse proxy and applying authentication at the proxy layer using nginx and Mutual TLS<\/strong><\/p>\n\n\n\n<script src=\"https:\/\/gist.github.com\/devops-school\/99888c9336b45ceca4342da393eca482.js\"><\/script>\n\n\n\n<p><strong>Reference<\/strong><br>&#8211; https:\/\/prometheus.io\/docs\/guides\/basic-auth\/<br>&#8211; https:\/\/prometheus.io\/docs\/operating\/security\/<br>&#8211; https:\/\/prometheus.io\/docs\/operating\/security\/#authentication-authorization-and-encryption<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[This tutorial is under developement] Prometheus does not directly support basic authentication (aka &#8220;basic auth&#8221;) for connections to the Prometheus expression browser and HTTP API. If you&#8217;d like to enforce&#8230; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[5013],"tags":[],"class_list":["post-12643","post","type-post","status-publish","format-standard","hentry","category-prometheus"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/12643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=12643"}],"version-history":[{"count":2,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/12643\/revisions"}],"predecessor-version":[{"id":12645,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/12643\/revisions\/12645"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=12643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=12643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=12643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}