0 reputation · 14 Nov 2021, 09:03 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 17 Nov 2021, 09:03 UTC
Restrict access to the metrics server and scrape targets, and protect credentials used for remote endpoints. Avoid exporting secrets or personal data in labels. Metrics endpoints can reveal internal topology and operational details even when they contain no passwords.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
prometheus