I'd like to propose a topic for the next dev summit related with authentication methods supported to scrape metrics:
I'm helping STACKIT people with their integrations and I'm struggling with their metric APIs. Currently, they only support jwt-bearer flow (RFC7523) and now prometheus common supports it, so it works fine but I'm wondering if would be acceptable to create another authentication section in common for STACKIT and managing the flows using the STACKIT-SDK.
I know that this can sound tricky, but STACKIT is working on zero trust approach (the typical workload identity federation) and at this point, that flow doesn't fit with the current oauth2 section (because sadly, there isn't any RFC for workload identity yet,
WIMSE is working on that).
My proposal is to add another section under
http_config named
stackit that receives the parameters for the authentication. The blueprint of adding the SDK is not a real impact because it's modular and we just need
core pkg , which doesn't add any extra dep than the already existing in common: