Hello,

I want to start a discussion if Prometheus should have config options to 
disable security on the "/-/healthy" and "/-/ready" endpoints.

Thanks to Amrit Pal Singh to bring this to the github issue list at 
first: https://github.com/prometheus/prometheus/issues/9166

Running Prometheus with enabled basic Auth on K8S actually requires some 
workarounds to be able to use the liveness and/or readiness checks. One 
would be the mentioned "httpHeaders" option - which requires to put 
somewhat plain credentials in the K8S definitions (which I really do not 
want). 

Currently I've disabled Basic Auth in Prometheus and use an nginx in Front 
that takes care about Auth on all endpoints, except for /-/ready and 
/-/healthy. But I do not like this either. :)

Julien Pivotto suggested to talk about this at the dev mailing list ... so 
please add your thoughts about this. Thx.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/fd2122fc-9aca-4b98-976a-6fa6e61c1eb3n%40googlegroups.com.

Reply via email to