Does prometheus support okta OAuth2 this authentication login method

yonggang dong

unread,

Aug 16, 2021, 5:09:50 AM8/16/21

to Prometheus Users

Brian Candler

unread,

Aug 16, 2021, 6:09:03 AM8/16/21

to Prometheus Users

Do you mean:

(1) prometheus making outbound scrapes using OAuth2 to authenticate itself to exporters?

or

(2) using OAuth2 to control inbound access to prometheus' own web interface and/or API?

Case (1) has been available since prometheus 2.27.0, using the client credentials grant only. See https://prometheus.io/docs/prometheus/latest/configuration/configuration/#oauth2

As far as I know case (2) isn't implemented natively, but it's done simply by sticking a reverse-proxy in front of Prometheus.

yonggang dong

unread,

Aug 16, 2021, 9:50:20 PM8/16/21

to Prometheus Users

thanks for your reply , I mean case (2) .

like snapshot below：

The account information of company personnel is in okta OAuth2. When accessing the webUI interface of prometheus, they can only log in with the account password.

So I hope that prometheus can support OAuth2 to log in to webUI.

Is there any other third-party method?

yonggang dong

unread,

Aug 16, 2021, 9:58:49 PM8/16/21

to Prometheus Users

Can you recommend which open source tool to use?

Brian Candler

unread,

Aug 17, 2021, 2:13:29 AM8/17/21

to Prometheus Users

I use Apache with mod_auth_openidc as the front-end proxy.

Reply all

Reply to author

Forward