Skip to content

feat(sink/prometheus_exporter) Restrict access by SubjectAccessReview to authorized clients in Kubernetes environment #25409

@jcantrill

Description

@jcantrill

A note for the community

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Use Cases

OpenShift is a kubernetes distribution that provides a secure computing environment by restricting access to services using RBAC. It is not uncommon for server workloads to require clients provide access tokens in order to access the service. The workload uses the token to verify a client has been granted the desired role. The goal of this feature is to enable the prometheus exporter sink to be configured to restrict access to clients which have the necessary role binding.

Attempted Solutions

The OpenShift fork of vector includes this capability ViaQ#265

Proposal

No response

References

No response

Version

0.54

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions