hello,
first, thanks for a great project.

The idea of a plugable Autheticator was proposed and considered a while 
back in #664 and the comment resonated then. I guess it still does. 
https://github.com/prometheus/jmx_exporter/issues/664#issuecomment-995943112 


My use case is in a container, where the classPath is locked down and the 
file system is readonly. It is a low risk classloading environment.

for some context:
my jvm running  a broker has the jolokia agent with a plugable 
Authenticator that delegates to JAAS. ideally I would be able to use the 
same Authenticator with this lovely prometheus exporter, but alas not at 
this time.

my jolokia config has property:
authClass=[org.apache.activemq.artemis.spi.core.security.jaas.HttpServerAuthenticator](https://github.com/apache/activemq-artemis/blob/main/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/HttpServerAuthenticator.java)

This allows Artemis to do the RBAC of the https endpoint based in the 
client cert in a convenient way. Access the jvm mbean server is restricted 
to authenticated users.

Is it worth working up a PR to make this possible? i.e: adding config to 
specify the class of Authenticator to dynamically load?

Kind regards and thanks for your time,
gary.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/069033c6-fe38-449d-b9dc-4cb2c495f4a9n%40googlegroups.com.

Reply via email to