instead of adding kube-rbac-proxy as a sidecar, integrating with Kubernetes ServiceAccount + RBAC could be done directly using the Kube api.
On Mon, Nov 28, 2022 at 12:45 PM Ben Kochie <[email protected]> wrote: > Yes, build it in. We don't want to require sidecars for every exporter. > > On Mon, Nov 28, 2022 at 12:43 PM Stuart Clark <[email protected]> > wrote: > >> On 2022-11-28 11:40, Ben Kochie wrote: >> > It depends on if the sidecar is with Prometheus or with the target. >> > >> > If it's with Prometheus, that's probably just a docs update. >> > >> > If it's with every exporter, that's probably something we would want >> > in the exporter-toolkit. >> > >> > But, my understanding was that the typical thing here was to use mTLS >> > for securing and authorizing Prometheus. >> > >> > If it's something we need to integrate into every exporter to do some >> > kind of token auth, we might want to consider this. >> > >> >> Do you mean building in the functionality directly into the exporter >> instead of using a sidecar? >> >> -- >> Stuart Clark >> > -- You received this message because you are subscribed to the Google Groups "Prometheus Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-developers/CAAAOEo1Cjr99SdYuiDM-68z0_k36KV0YjHU7Htq3N7VQ6-bm2Q%40mail.gmail.com.
