How can I limit access to data

Rodolphe Ghio

unread,

Oct 15, 2020, 4:57:10 AM10/15/20

to Prometheus Users

Hi everyone,
I was wondering if I can limit access to prometheus's data by using nginx for example.

For example :

scrape_configs:

- job_name: 'Job'

- targets:

- 1.2.3.4:5678 #Client 1

- 2.3.4.5:6781 #Client 2

My goal is that client #1 has access only to the data related to his instance and the same for client #2. Is prometheus able to do this? Do I have to use another service? If yes, which one would be the most useful?

Brian Candler

unread,

Oct 15, 2020, 8:19:08 AM10/15/20

to Prometheus Users

You can't do this at the HTTP layer, e.g. with Nginx. All PromQL queries will be passed straight through.

What you need is a frontend like Grafana, and configure dashboards restricted to each client (which Grafana does allow).

Aliaksandr Valialkin

unread,

Oct 16, 2020, 6:47:11 PM10/16/20

to Brian Candler, Prometheus Users

Take a look at https://github.com/prometheus-community/prom-label-proxy and

On Thu, Oct 15, 2020 at 3:19 PM Brian Candler <b.ca...@pobox.com> wrote:

You can't do this at the HTTP layer, e.g. with Nginx. All PromQL queries will be passed straight through.

What you need is a frontend like Grafana, and configure dashboards restricted to each client (which Grafana does allow).

--
You received this message because you are subscribed to the Google Groups "Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/7fb87243-6687-4dd9-ade2-d2ddd92cc88ao%40googlegroups.com.