File tree Expand file tree Collapse file tree 1 file changed +8
-4
lines changed Expand file tree Collapse file tree 1 file changed +8
-4
lines changed Original file line number Diff line number Diff line change @@ -10,11 +10,15 @@ on each request. They trust this value completely: if you need to
10
10
protect your Cortex installation from accidental or malicious calls
11
11
then you must add an additional layer of protection.
12
12
13
- Typically this means you run Cortex behind a reverse proxy, and ensure
14
- that all callers, both machines sending data over the remote_write
13
+ Typically this means you run Cortex behind a reverse proxy, and you must
14
+ ensure that all callers, both machines sending data over the ` remote_write `
15
15
interface and humans sending queries from GUIs, supply credentials
16
16
which identify them and confirm they are authorised.
17
17
18
- When configuring the remote_write API in Prometheus there is no way to
18
+ When configuring the ` remote_write ` API in Prometheus there is no way to
19
19
add extra headers. The user and password fields of http Basic auth, or
20
- Bearer token, can be used to convey tenant ID and/or credentials.
20
+ Bearer token, can be used to convey the tenant ID and/or credentials.
21
+
22
+ To disable the multi-tenant functionality, you can pass the argument
23
+ ` -auth.enabled=false ` to every Cortex component, which will set the OrgID
24
+ to the string ` fake ` for every request.
You can’t perform that action at this time.
0 commit comments