如何为普罗米修斯的工作添加持有者令牌

Question

我已经开始为我的微服务开发普罗米修斯。我一开始就做到了。现在，是时候在弹簧安全性下推动执行器端点了。添加后，安全执行器正在等待普罗米修斯的持有者令牌。那么，如何在普罗米修斯作业中配置用户名和密码，以便普罗米修斯从登录中获得承载令牌，并将其添加为所有请求的标头中的"授权"。

我正在使用下面的命令在docker容器中运行普罗米修斯

1. $ docker run --name prometheus -p 9090:9090 -v prometheus.yml:/etc/prometheus/prometheus.yml -d prom/prometheus
2. $ docker run --name grafana -d -p 3000:3000 grafana/grafana

以下是prometheus.yml文件

# my global config
global:
scrape_interval:     15s # Set the scrape interval to every 15 seconds. Default is every 1 minute.
evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
# scrape_timeout is set to the global default (10s).
# Load rules once and periodically evaluate them according to the global 'evaluation_interval'.
rule_files:
# - "first_rules.yml"
# - "second_rules.yml"
# A scrape configuration containing exactly one endpoint to scrape:
# Here it's Prometheus itself.
scrape_configs:
# The job name is added as a label `job=<job_name>` to any time series scraped from this config.
- job_name: 'prometheus'
# metrics_path defaults to '/metrics'
# scheme defaults to 'http'.
static_configs:
- targets: ['127.0.0.1:9090']
- job_name: 'NL-APPLICATION'
metrics_path: '/actuator/prometheus'
scrape_interval: 5s
scheme: http
static_configs:
- targets: ['172.17.0.1:8085']
- job_name: 'NL-ADMIN-API'
metrics_path: '/actuator/prometheus'
scrape_interval: 5s
static_configs:
- targets: ['172.17.0.1:8083']

如何指示普罗米修斯按照操作

1. API调用'/login'使用用户名和密码获取Bearer令牌
2. 在所有执行器API调用中添加Bearer令牌作为"授权"作为头

Answer 1

您可以指定为文件或将令牌添加到配置

- job_name: 'test'
metrics_path: "/metrics"
scheme: "http"
bearer_token_file: /var/run/secrets/    OR   bearer_token: token_here
static_configs:
- targets: ['host.com']