Project

General

Profile

Actions

Documentation #45377

closed

mgr/dashboard: document Prometheus' security model

Added by Patrick Seidensal almost 6 years ago. Updated 8 months ago.

Status:
Resolved
Priority:
Normal
Category:
Docs
Target version:
% Done:

0%

Backport:
octopus nautilus
Reviewed:
Affected Versions:
Pull request ID:
Tags (freeform):
Fixed In:
v16.0.0-1910-g9e1e02508f
Released In:
v16.2.0~2480
Upkeep Timestamp:
2025-07-15T01:12:50+00:00

Description

As Prometheus' security model may not be obvious, we should document how Prometheus, by default, sees it and provide references to this perception.

For example, access to the Prometheus HTTP API cannot be password protected by configuring Prometheus and is, by default, considered to be accessible by untrusted users.

It is presumed that untrusted users have access to the Prometheus HTTP endpoint and logs.
-- https://prometheus.io/docs/operating/security/


Related issues 2 (0 open2 closed)

Copied to Dashboard - Backport #47227: octopus: mgr/dashboard: document Prometheus' security modelResolvedActions
Copied to Dashboard - Backport #47228: nautilus: mgr/dashboard: document Prometheus' security modelResolvedActions
Actions #1

Updated by Patrick Seidensal almost 6 years ago

  • Pull request ID set to 34902
Actions #2

Updated by Patrick Seidensal almost 6 years ago

  • Backport set to octopus
Actions #3

Updated by Sebastian Wagner almost 6 years ago

  • Status changed from In Progress to Resolved
  • Target version set to v15.2.4
Actions #4

Updated by Patrick Seidensal over 5 years ago

  • Backport changed from octopus to octopus nautilus
Actions #5

Updated by Patrick Seidensal over 5 years ago

  • Backport changed from octopus nautilus to octopus
Actions #6

Updated by Patrick Seidensal over 5 years ago

  • Backport changed from octopus to octopus nautilus
Actions #7

Updated by Patrick Seidensal over 5 years ago

  • Status changed from Resolved to Pending Backport
Actions #8

Updated by Patrick Seidensal over 5 years ago

  • Copied to Backport #47227: octopus: mgr/dashboard: document Prometheus' security model added
Actions #9

Updated by Patrick Seidensal over 5 years ago

  • Copied to Backport #47228: nautilus: mgr/dashboard: document Prometheus' security model added
Actions #10

Updated by Nathan Cutler over 5 years ago

  • Status changed from Pending Backport to Resolved

While running with --resolve-parent, the script "backport-create-issue" noticed that all backports of this issue are in status "Resolved" or "Rejected".

Actions #11

Updated by Ernesto Puerta almost 5 years ago

  • Project changed from mgr to Dashboard
  • Category changed from 175 to Docs
Actions #12

Updated by Upkeep Bot 8 months ago

  • Merge Commit set to 9e1e02508f94e6d8f2a5156141947efaa971c1bf
  • Fixed In set to v16.0.0-1910-g9e1e02508f
  • Released In set to v16.2.0~2480
  • Upkeep Timestamp set to 2025-07-15T01:12:50+00:00
Actions

Also available in: Atom PDF