Secret for Signoz

[bdronneau]

Hello,

Thank for the work done here 🚀
I'm currently testing to put in place signoz on k8s, the documentation and helm chart are quite clear.
But I didn't see in the configuration any "secret/token" in order to protect the endpoint.

I have missing something in the configuration or it's not possible for now ?

Best

[prashant-shahi]

Hello @bdronneau!!

We use ClusterIP by default so all SigNoz components remain accessible only within the k8s cluster.

protect the endpoint.

If you meant to protect SigNoz frontend and query-service public access. The Auth feature is being worked on right now.
You can track it here: #874

[prashant-shahi]

@bdronneau If you meant to protect the SigNoz Otel-Collector, we have discussed it internally and realised its importance. That task will be picked up in soon future.

[bdronneau]

Hi, Indeed if all stuff are in same cluster, using clusterip is enough. But I prefer to have separate clusters from tooling / monitoring and running (apps production). If you are working on, it's perfect =) Le jeu. 21 avr. 2022 à 23:53, Prashant Shahi ***@***.***> a écrit :

…

@bdronneau <https://github.com/bdronneau> If you meant to protect the SigNoz Otel-Collector, we have discussed it internally and realised its importance. That task will be picked up in soon future. — Reply to this email directly, view it on GitHub <#1007 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA72DLQLIZJTSOQQUPGGTVLVGHE33ANCNFSM5T7KMSPA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[pranay01]

hey @bdronneau the login + auth feature is shipped now in this release - https://github.com/SigNoz/signoz/releases/tag/v0.8.0

Do check it out and let us know of any feedback

[bdronneau]

Hi,
Wonderful ! I'm currently instrumenting a django app (not fully fonctionnal) so this will be the next step.

[pranay01]

Cool, let us know how it goes - and drop by in our slack community if you have question https://signoz.io/slack

[bdronneau]

Hi,

Far I understand this authentification feature it's for the end user, not for the application for send metrics.

[pranay01]

yes, that's accurate @bdronneau

[bdronneau]

I close this discussion in indeed, it's better to leave collector doing is best like collecting and make basic auth with NGINX if public access

[drjasonharrison]

For Enterprise users there will be the desire to have admin vs standard user accounts.