[dnsdist] Is it possible to disable BasicAuth for /metrics?

[Remi Gacogne]

Hi Holger,

On 1/14/20 12:08 AM, Holger Hoffstätte wrote:
> I'm loving dnsdist but have hit a little snag. I have everything working
> incl. console access, web UI, Prometheus metrics scraping and even my
> own Lua extension, but despite reading all the docs I haven't managed
> to disable BasicAuth for /metrics.
> I don't care whether it's required for the web UI itself, but for the
> Prometheus endpoint I'd really like to disable it due to the way targets
> are configured, which I'd like to change (without basic auth if possible).
> Security is not an issue either way.
> 
> So far all attempts with the webserver options have not worked,
> and while I have found the portion of code that performas the auth
> I'd rather not go patching around unless absolutely necessary.

I'm afraid we require either BasicAuth or X-API-Key for the /metrics
endpoint. Please feel free to open a feature request (or better yet, a
pull request ;) at [1] if you really need to be able to disable
authentication.

[1]: https://github.com/PowerDNS/pdns/issues/new/choose

Best regards,
-- 
Remi Gacogne
PowerDNS.COM BV - https://www.powerdns.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20200114/338ca435/attachment.sig>