See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#remote_write
There are settings for "authorization", "basic_auth" and "tls_config <https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config>" that can be used to enable authentication to the remote_write endpoint. On Monday 29 January 2024 at 12:35:00 UTC Siradj Eddine Fisli wrote: > Actually i am using ingress-nginx to expose prometheus endpoint , shall i > use nginx controller auth ? but what should i pass as argument to > remote_write ? > > > Le lundi 29 janvier 2024 à 12:24:32 UTC+1, Brian Candler a écrit : > >> Using --web.config-file you can make Prometheus require HTTP Basic >> Authentication (basic_auth_users) or TLS client certificate >> authentication (client_auth_type, client_ca_file, client_allowed_sans). >> >> See: >> https://prometheus.io/docs/prometheus/latest/configuration/https/#https-and-authentication >> >> If you want this to happen only for certain endpoints like remote_write, >> then you'll need to bind prometheus to 127.0.0.1 and run a reverse proxy in >> front of it with whatever authorization policy you want. >> >> On Monday 29 January 2024 at 10:45:12 UTC Siradj Eddine Fisli wrote: >> >>> I have two prometheus instances , one is in agent mode remote writing >>> metrics to the second one, i want to add authentication mechanism, also i >>> am using kube-prometheus-stack. is there any solution ? >>> also prometheus is accessible via https, i configured that using >>> cert-manager and letsencrypt. >> >> -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/49b22ab5-97ba-4fcb-9229-837d15c3f80en%40googlegroups.com.
