Hi, Thanks for your response.
So as you mentioned any passwords mentioned in prometheus config should not be visible outside from UI or api. Correct?. example http://demo.robustperception.io:9090/config I am using docker containers. On Saturday, March 27, 2021 at 6:04:51 PM UTC+5:30 Julien Pivotto wrote: > If the password is visible from the prometheus UI or API's that is a major > security issue. > > If the password is present in the Prometheus configuration file, that is > not a security issue because you can protect it with your operating system > abilities. > > Can you please clarify? Thanks. > > Le sam. 27 mars 2021 à 13:05, Amit Das <amitd...@gmail.com> a écrit : > >> Hi, >> >> I am looking for getting the metrics behind basic auth from url like >> 192.16.10.8/metrics (with nginx auth). >> >> I see i can do that by adding username and password in the prometheus.yml >> job. >> >> Prometheus URL is accessible to everyone internaly and can see the >> password from the config. >> From security perspective this is not good. >> Can you please suggest the best approach to get metrics with basic auth >> without leaking credentials like from prometheus url. >> >> Thanks >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Prometheus Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to prometheus-use...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/prometheus-users/429f1aa1-7f2e-40ea-9a13-4b574d05b2c6n%40googlegroups.com >> >> <https://groups.google.com/d/msgid/prometheus-users/429f1aa1-7f2e-40ea-9a13-4b574d05b2c6n%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/ed8370ad-1e60-4ae3-aa9c-bc0e7e2a2e2bn%40googlegroups.com.
