Skip to content

fix: require auth on /api/* and /metrics endpoints#3858

Open
markoyoungson wants to merge 1 commit intogoogle:masterfrom
markoyoungson:fix/api-prometheus-auth
Open

fix: require auth on /api/* and /metrics endpoints#3858
markoyoungson wants to merge 1 commit intogoogle:masterfrom
markoyoungson:fix/api-prometheus-auth

Conversation

@markoyoungson
Copy link
Copy Markdown

  • Add authWrappedMux to enforce auth on all registered handlers
  • Move auth setup before api.RegisterHandlers so auth applies to /api/*
  • Add httpAuthFile params to RegisterPrometheusHandler for /metrics auth
  • Add tests verifying auth is required when configured

Fixes Google VRP submission for cAdvisor OT2 tier finding.

- Add authWrappedMux to enforce auth on all registered handlers
- Move auth setup before api.RegisterHandlers so auth applies to /api/*
- Add httpAuthFile params to RegisterPrometheusHandler for /metrics auth
- Add tests verifying auth is required when configured

Fixes Google VRP submission for cAdvisor OT2 tier finding.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant