Repository navigation
Promethues client_python doesn't support TLS as well as authentication #761
Description
Current Prometheus client_python does support basic auth towards pushgateway but it doesn't support TLS as well as authentication towards prometheus server. Is there any plan to support it? Will it be accepted if we are ready to contribute?
Reacted by AkshinK
Activity
csmarchbanks commentedon Feb 2, 2022
Hello, I assume you are referring to
start_http_server, in which case there are no plans to support it right now. The goal of that function is to keep it as basic as possible and for more advanced use cases users should set up the server themselves.fernandino143 commentedon Sep 6, 2022
I was reading this I think I got so confused - #120
So, my point is that when the OP mentioned "it doesn't support TLS as well as authentication towards prometheus server" I was wondering if it would be possible to have TLS enabled on the pushgateway server. The answer is YES.
However, how in God's name is the handler supposed to be configured in order to pass on the certificate/key or a bundle on the client side in order for the TLS portion to actually work? I mean, the implementations of basic_auth_handler and default_handler are only using basic_auth (username / pwd) to authenticate? Am I missing something? Or is this the case where I literally have to create my own handler?
csmarchbanks commentedon Sep 6, 2022
Rereading this issue, I think it is covering two separate things:
start_http_server.fernandino143 commentedon Sep 7, 2022
I would love to help (1) but I'm getting humiliated when trying to create one myself when using the latest python client
csmarchbanks commentedon Sep 20, 2022
@fernandino143 I created #841 to support this, would you mind giving it a try on your system? Any feedback on how it is implemented/the arguments is also welcome!
fernandino143 commentedon Sep 21, 2022
Yep. That's very similar to the one I had in #838 and closed it (internal stuff). But you made it look good. Give me a few moments to test this properly, but I think it does the trick.