hello,
first, thanks for a great project.

The idea of a plugable Autheticator was proposed and considered a while 
back in #664 and the comment resonated then. I guess it still does. 
https://github.com/prometheus/jmx_exporter/issues/664#issuecomment-995943112 


My use case is in a container, where the classPath is locked down and the 
file system is readonly. It is a low risk classloading environment.

for some context:
my jvm running  a broker has the jolokia agent with a plugable 
Authenticator that delegates to JAAS. ideally I would be able to use the 
same Authenticator with this lovely prometheus exporter, but alas not at 
this time.

my jolokia config has property:
authClass=[org.apache.activemq.artemis.spi.core.security.jaas.HttpServerAuthenticator](https://github.com/apache/activemq-artemis/blob/main/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/HttpServerAuthenticator.java)

This allows Artemis to do the RBAC of the https endpoint based in the 
client cert in a convenient way. Access the jvm mbean server is restricted 
to authenticated users.

Is it worth working up a PR to make this possible? i.e: adding config to 
specify the class of Authenticator to dynamically load?

Kind regards and thanks for your time,
gary.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/069033c6-fe38-449d-b9dc-4cb2c495f4a9n%40googlegroups.com.

Reply via email to