Marton Greber created KUDU-3693:
-----------------------------------
Summary: Prometheus endpoint auth
Key: KUDU-3693
URL: https://issues.apache.org/jira/browse/KUDU-3693
Project: Kudu
Issue Type: Sub-task
Reporter: Marton Greber
Prometheus does not support SPNEGO therefore it is necessary to figure out a
solution that we can offer on secure deployments.
Below are some options outlined:
- have the prometheus endpoints have an auth on/off flag (in Impala if I've
read correctly there is no security check for the metrics endpoints:
https://github.com/apache/impala/blob/0cd240a1cbd25ef097f392cbc02a70ad0b5f11d6/fe/src/test/java/org/apache/impala/customcluster/LdapWebserverTest.java#L210-L213)
- Use bearer token (Ozone does this as well:
https://ozone.apache.org/docs/edge/feature/observability.html?utm_source=chatgpt.com
)
- Provide info how to setup with Knox in front of Kudu.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
