-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
Environment
- Nautobot version: 2.1.5
- nautobot-capacity-metrics version: all
Proposed Functionality
In Nautobot 2.1.5, the METRICS_AUTHENTICATED setting was added to allow for authentication to the /metrics endpoint. This proposal would be to take advantage of the METRICS_AUTHENTICATED setting and if set, require authentication for the endpoint.
The main purpose of this is so that if Nautobot is run on the internet (or even an intranet), you may be exposing data you don't want to anyone. This give the user the option to require authentication if desired.
The default state of METRICS_AUTHENTICATED is False so any existing monitoring systems will be able to still operate in the same manner.
Use Case
- A more secure environment where the user doesn't want the
/api/plugins/capacity-metrics/app-metricsendpoint accessible to unauthenticated users.
Metadata
Metadata
Assignees
Labels
No labels