prometheus 密码认证之base认证

港控/mmm° 2024-03-26 16:32 20阅读 0赞

## prometheus 密码认证之base认证 ##

#### 文章目录 ####

*  prometheus 密码认证之base认证
 *   *  一、生成加密哈希
     *  二、创建web-config.yml配置文件
     *  三、重新启动容器
     *  四、访问测试

[docker部署prometheus][docker_prometheus]

### 一、生成加密哈希 ###

安装加密工具

yum install -y httpd-tools

自定义密码

htpasswd -nBC 12 '' | tr -d ':\n'
    然后输入密码，会出现一串加密字符串

我这里直接用工具生成

\[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传![在这里插入图片描述][9b59b3800309422cb022db10d22d883a.png_pic_center]

### 二、创建web-config.yml配置文件 ###

basic_auth_users:
        admin: $2a$10$z58JxPndLBwFHVwTUPieGe.4ccpeaAjNeh5pth0cmylX03ECUsOoG

### 三、重新启动容器 ###

version: '3'
    services:
        container_name: node-exporter
        restart: unless-stopped
        hostname: node-exporter
        privileged: true
        ports:
          - "9100:9100"
        networks:
          - "prometheus"
        volumes:
          - "/opt/prometheus/node-exporter/proc:/host/proc:ro"
          - "/opt/prometheus/node-exporter/sys:/host/sys:ro"
          - "/opt/prometheus/node-exporter:/rootfs:ro"
          - "/etc/localtime:/etc/localtime"
      prom:
        image: prom/prometheus:v2.42.0
        container_name: prometheus
        restart: unless-stopped
        hostname: prometheus
        privileged: true
        ports:
          - "9090:9090"
        networks:
          - "prometheus"
        volumes:
          - "/opt/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml"
          - "/etc/localtime:/etc/localtime"
          - "/opt/prometheus/web-config.yml:/etc/prometheus/web-config.yml"
        command: 
          --web.enable-lifecycle #热加载
          --config.file=/etc/prometheus/prometheus.yml # 指定配置文件
          --web.config.file=/etc/prometheus/web-config.yml
    networks:
      prometheus:
        driver: bridge

> /opt/prometheus/prometheus.yml 本地prometheus的配置文件
> 
> /opt/prometheus/web-config.yml 本地prometheus的密码配置文件

注意：检查web-config.yml的语法

promtool check web-config web-config.yml

![在这里插入图片描述][1006536ef7ad4023bbbd563062fcfd0d.png_pic_center]

### 四、访问测试 ###

没有用户名密码

curl --head --request GET http://localhost:9090/graph

![在这里插入图片描述][b1ddff46ae2042fb8b987d324d457003.png_pic_center]

有用户名密码

curl -u admin:123456 --request GET http://localhost:9090/metrics

![在这里插入图片描述][dac075efdd8d4c40a49749e83e491884.png_pic_center]

[docker_prometheus]: https://blog.csdn.net/weixin_43296313/article/details/117228544
[9b59b3800309422cb022db10d22d883a.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/d15c43f87bc84605a54f6ea019e5d5ff.png
[1006536ef7ad4023bbbd563062fcfd0d.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/b2f04362e2d04db4892b5547d8f814eb.png
[b1ddff46ae2042fb8b987d324d457003.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/66a4554a183d46898936897d8bb26bdd.png
[dac075efdd8d4c40a49749e83e491884.png_pic_center]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/26/aed6b607d39f42039486b34987ec9d8a.png