Is it possible to secure the /metrics endpoint ?

[craph]

Hello everyone,

With the standalone binary of sql_exporter, I would like to know if it's possible to add security on the /metrics endpoint with login/pwd for example ?

Thank you very much.

Best regards,

[burningalchemist]

Hi @craph, yes it's possible. Please check the docs in the miscellaneous section. You need to do extra configuration:

TLS and Basic Authentication
SQL Exporter supports TLS and Basic Authentication. This enables better control of the various HTTP endpoints.

To use TLS and/or Basic Authentication, you need to pass a configuration file using the --web.config.file parameter. The format of the file is described in the exporter-toolkit repository.

Try it out and let me know if you need any assistance. It's also possible to set up rate limiting in the same config, just in case. 👍

[burningalchemist]

UPD: If you use Kubernetes/Helm, please check the examples here: https://github.com/burningalchemist/sql_exporter/tree/master/examples/auth-only

[craph]

Hi @burningalchemist Thank you very much for the update. I haven't seen this section my bad I'm sorry. I have seen the part about Kubernetes/Helm but not the one for the standalone binary.

I'll check the docs.

Thank you very much again.
Best regards,