Skip to content

README.md

Latest commit

 

History

History
47 lines (35 loc) · 1.42 KB

README.md

File metadata and controls

47 lines (35 loc) · 1.42 KB

Dynamic-auth

Description

This project is a proof of concept for authentication and authorization.

Architecture

The following diagram illustrates the sequence of interactions between different components:

sequenceDiagram
    participant A as Agent (Promtail/Prometheus)
    participant E as Envoy Proxy
    participant AS as Auth Service
    participant R as Redis
    participant B as Backend (Thanos/Loki)

    Note over A,E: Agent configured with username/password
    A->>E: Send metrics/logs with Basic Auth
    Note over E: Basic Auth header:<br/>base64(username:password)
    E->>AS: Validate credentials
    AS->>R: Check credentials hash
    R-->>AS: Return tenant_id if valid and path == loki else just validation
    AS-->>E: OK + tenant headers
    E->>B: Forward with tenant context
Loading

Usage

To use this project, follow these steps:

  1. Clone the repository.
  2. Install the required dependencies.
  3. Configure the Agent with the appropriate username and password.
  4. Start the Envoy Proxy.
  5. Start the Auth Service.
  6. Start the Redis server.
  7. Start the Backend.
  8. Send metrics/logs to the Agent with Basic Auth headers.
  9. The Auth Service will validate the credentials and return the tenant headers.
  10. The Envoy Proxy will forward the request to the Backend with the tenant context.

License

This project is licensed under the MIT License. See the LICENSE file for more information.