Prometheus: setha ukhiye we-API womgomo nge-http_headers ne-proxy_url
Hlanganisa i-http_headers yokuqoqa ne-proxy_url futhi uhlukanise izihloko ze-API zesiphakeli somthombo kusuka kuzihloko ze-CONNECT ezithunyelwa kumxhumanisi.
Lapho iphoyinti lokugcina lezilinganiso le-HTTPS lidinga ukhiye we-API futhi i-Prometheus kumele isebenzise iphroksi yokuya phambili, setha isihloko esicelweni sokuqoqa ngokwaso. Ngenguqulo ye-Prometheus esekela i-http_headers:
scrape_configs:
- job_name: secured_metrics
scheme: https
metrics_path: /metrics
proxy_url: http://proxy.example:8080
http_headers:
X-API-Key:
files:
- /etc/prometheus/secrets/metrics-api-key
static_configs:
- targets: ['metrics.example:443']
Ifayela liqukethe ukhiye we-API womgomo ohlosiwe futhi kufanele ufundeke endaweni yokusebenza ye-Prometheus. Kusiqukathi, kunikeze kuleyo ndlela yohlangothi lwesiqukathi.
I-http_headers ibeka i-X-API-Key esicelweni esiya ku-metrics.example. Ngomhubhe ojwayelekile we-HTTPS CONNECT, leso sihloko sihamba ngaphakathi kwe-TLS yendawo ekuyiwa kuyo. Umxhumanisi unikeza ukuxhumana futhi kufanele avume umhubhe. Ngephoyinti lokugcina lezilinganiso elifinyeleleka emphakathini lapho abaxhumanisi bomphakathi bevunyelwe, uhlu lwamaphroksi e-HTTP lunikeza abantu abangaba yikhandidethi be-proxy_url ngaphandle kwe-akhawunti; gcina ukhiye we-API esicelweni sendawo ekuyiwa kuyo.
I-proxy_connect_header inenye indawo ekuyiwa kuyo: umxhumanisi uthola lezo zihloko ngesikhathi se-CONNECT. Ukubeka ukhiye we-API womgomo lapho akukudlulisi kusiphakeli sezilinganiso njengesihloko sesicelo se-HTTPS.
Gcina igama lomsingathi nendlela yangempela yezilinganiso ekucushweni kokuqoqa. I-Prometheus iphinde ivikele izihloko ezizibeka yona ekubhalweni phezulu okungafuneki, ngakho kulokhu khiye we-API sebenzisa izinkambu zezihloko ezingokwezifiso ezisekelwayo.