pyroscope icon indicating copy to clipboard operation
pyroscope copied to clipboard

Pyroscope Login and TLS Enablement

Open vikasmav opened this issue 1 year ago • 3 comments

I am deploying Pyroscope in Micro Service Mode in Kubernetes, below are my concerns

Does Pyroscope has login screen which can be either integrated with LDAP or atleast create few users with some credentials and those users can login with the provided creds.

When deployed in Kubernetes Microservice mode, how to enable tls is unclear. There is no documentation related to that or even when it is deployed in monolith mode. I believe we can update the documentation with those details.

Can anyone please answer the above?

Thank you Vikas

vikasmav avatar Sep 27 '24 17:09 vikasmav

Hi @vikasmav!

Does Pyroscope has login screen which can be either integrated with LDAP or atleast create few users with some credentials and those users can login with the provided creds.

We used to have an auth layer in pre-v1 versions but decided to remove it – we suggest that you implement the auth layer on your own. The simplest way is to deploy an authenticating reverse proxy (e.g., nginx) in front of the service, and limit the network access.

When deployed in Kubernetes Microservice mode, how to enable tls is unclear.

I'm afraid TLS is not fully supported at this time. We will address this issue in a future version.

kolesnikovae avatar Sep 30 '24 04:09 kolesnikovae

+1 on TLS enablement I work at Canonical and we're working on creating a distribution for Pyroscope (a charm) for the Juju ecosystem and the goal is to have Pyroscope deployed in its distributed mode (likely in a scaled multi-node setup). So, securing communication with TLS between the different Pyroscope components is a crucial part of this.

michaeldmitry avatar Jul 10 '25 14:07 michaeldmitry

Any updates if this issue is being worked on? were also facing the same "EOF" exception issue for when we try to call the query-frontend

jkmdeltek15 avatar Sep 17 '25 09:09 jkmdeltek15