jack/Distributed-Prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: 引入 vmauth 鉴权与严格多租户

Browse Source 
- 对外端口统一为 18428（vmauth 入口），VM 不再直接暴露宿主机端口
- 边缘 vmagent 与中央 Prometheus remote_write 增加 basic auth
- 支持 tenants.csv 驱动的 per-tenant 写入/查询隔离，并提供管理员跨租户只读查询
- 更新 Grafana provisioning 与部署/文档

Made-with: Cursor
This commit is contained in:
root
2026-04-22 11:41:13 +00:00
parent ab1515dffb
commit c4825c2d27
21 changed files with 278 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
central-server/config/vmauth/tenants.csv.example Normal file
View File

@@ -0,0 +1,3 @@
tenant_id,edge_node_id,write_user,write_password,read_user,read_password
1001,edge_a,edge_a_write,CHANGE_ME,edge_a_read,CHANGE_ME
1002,edge_b,edge_b_write,CHANGE_ME,edge_b_read,CHANGE_ME

6
central-server/config/vmauth/vmauth.yml.template Normal file
View File

@@ -0,0 +1,6 @@
unauthorized_user:
# 未认证请求默认拒绝
url_map: []
# 注意：本文件将由 deploy.sh 根据 config/vmauth/tenants.csv 自动生成。
users: []