Skip to content

fix: require auth on /api/* and /metrics endpoints#3858

Open
markoyoungson wants to merge 1 commit into
google:masterfrom
markoyoungson:fix/api-prometheus-auth
Open

fix: require auth on /api/* and /metrics endpoints#3858
markoyoungson wants to merge 1 commit into
google:masterfrom
markoyoungson:fix/api-prometheus-auth

Conversation

@markoyoungson

Copy link
Copy Markdown
  • Add authWrappedMux to enforce auth on all registered handlers
  • Move auth setup before api.RegisterHandlers so auth applies to /api/*
  • Add httpAuthFile params to RegisterPrometheusHandler for /metrics auth
  • Add tests verifying auth is required when configured

Fixes Google VRP submission for cAdvisor OT2 tier finding.

- Add authWrappedMux to enforce auth on all registered handlers
- Move auth setup before api.RegisterHandlers so auth applies to /api/*
- Add httpAuthFile params to RegisterPrometheusHandler for /metrics auth
- Add tests verifying auth is required when configured

Fixes Google VRP submission for cAdvisor OT2 tier finding.
@github-actions

Copy link
Copy Markdown

This PR is stale because it has been open 90 days with no activity. This PR will be closed in 30 days unless new comments are made or the stale label is removed. To skip these checks, apply the "lifecycle/frozen" label.

@github-actions github-actions Bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jun 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant