Bug 2028335

Summary:	[RFE][cephadm] Allow the configuration of prometheus authentication using cephadm
Product:	[Red Hat Storage] Red Hat Ceph Storage	Reporter:	James Biao <jbiao>
Component:	Cephadm	Assignee:	Redouane Kachach Elhichou <rkachach>
Status:	POST ---	QA Contact:	Sunil Kumar Nagaraju <sunnagar>
Severity:	high	Docs Contact:	Karen Norteman <knortema>
Priority:	high
Version:	5.1	CC:	adking, mmuench, rkachach, saraut, vereddy
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	7.0
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Comment 1 Sebastian Wagner 2021-12-02 09:34:31 UTC

Ok this gets complicated. 

cephadm doesn't support SSL at this point. See https://bugzilla.redhat.com/show_bug.cgi?id=1994251

cephadm doesn't support deploying additional files for existing daemon types. See https://prometheus.io/docs/guides/basic-auth/#creating-web-yml and 

---

For now you can manually deploy your own Prometheus and Grafana. Does this help?

Comment 2 Sebastian Wagner 2021-12-02 12:17:25 UTC

relates to https://bugzilla.redhat.com/show_bug.cgi?id=2028173

Comment 13 Redouane Kachach Elhichou 2023-03-13 09:55:59 UTC

Support for the first part (basic auth) has been add by the following upstream PR: https://github.com/ceph/ceph/pull/46601. More changes
are needed to make the authentication configurable.