mongodb_exporter icon indicating copy to clipboard operation
mongodb_exporter copied to clipboard

[feature]split user and password from uri

Open naughtyGitCat opened this issue 2 years ago • 4 comments

Is your feature request related to a problem? Please describe. expose monitoring mongo instance URI will be helpful when handling problems, but exposing user pass is insecure

Describe the solution you'd like user and pass supply in env variables

Describe alternatives you've considered use --remark or --note to add extra info, such as --note=IP:PORT

naughtyGitCat avatar Sep 13 '22 06:09 naughtyGitCat

similar request is in #380 . As a secure alternative so far you can use tls connection with --web.config which is Prometheus TLS config file

denisok avatar Sep 13 '22 17:09 denisok

hm. I mixed up the things, --web.config is the parameter for exporter itself. It will not help with connection to mongo. So yeah, concern is quite critical we need to address it.

denisok avatar Sep 14 '22 12:09 denisok

to make it clear --web-config is for exporter itself, but you still use tls in a connection URI: tls=truetlsCertificateKeyFile=Server.pem&tlsCAFile=ca.pem in connection string instead of password.

denisok avatar Sep 14 '22 16:09 denisok

thanks, TLS may be another way to secure the exporter, and seems a little inconvenient to me. we want to expose the monitoring DB instance URL

naughtyGitCat avatar Sep 15 '22 06:09 naughtyGitCat