{"repo":"k8spin/loki-multi-tenant-proxy","free":true,"listed":false,"github":"https://github.com/k8spin/loki-multi-tenant-proxy","clone":"git clone https://github.com/k8spin/loki-multi-tenant-proxy.git","description":"Grafana Loki multi-tenant Proxy. Needed to deploy Grafana Loki in a multi-tenant way","language":"Go","stars":69,"topics":["loki","grafana","grafana-loki","proxy","promtail","multi-tenant","kubernetes"],"license":"GPL-3.0","category":"networking-infra","readme_excerpt":"Grafana Loki - Multi tenant proxy This project has been developed to make easy to deploy a Grafana Loki Server in a multi-tenant way. There is a lot of understanding about how it works. - https://github.com/grafana/loki/issues/701 - https://github.com/grafana/loki/issues/525 This works is almost based on this issue comment. What is it? It is a basic golang proxy. It does basic auth, logs the requests and serves as a loki reverse proxy. I think this is the very core functionallity needed to manage a multi-tenant service. Actually, Grafana loki does not check the auth of any request. The multi-tenant mechanism is based in a request header: X-Scope-OrgID . So, if you have untrusted tenants, you have to ensure a tenant uses it's own tenant-id/org-id and does not use any id of other tenants. Requirements To use this proxy, you have to configure your Grafana Loki server with auth enabled: true as described in the offical docs. Then put the proxy in front of your Grafana Loki server instance, configure the auth proxy configuration, and run it. Run it Where: - --port : Port used to expose this proxy. - --loki-server : URL of your grafana loki instance. - --auth-config : Authentication configuration file path. Configure the proxy The auth configuration is very simple. Just create a yaml file my-auth-config.yaml with the following structure: An example is available at configs/multiple.user.yaml file: A tenant can contains multiple users. But a user is tied to a simple tenant. Configure","default_branch":null,"files":null,"tree":[],"storefront":"/r/k8spin","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/k8spin/loki-multi-tenant-proxy/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}