Skip to content

Commit 77490f9

Browse files
authored
Add information about disabling multi-tenant (#2805)
Also clean up the language a bit. Signed-off-by: Austin McKinley <[email protected]>
1 parent 9aecd89 commit 77490f9

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

docs/production/auth.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,15 @@ on each request. They trust this value completely: if you need to
1010
protect your Cortex installation from accidental or malicious calls
1111
then you must add an additional layer of protection.
1212

13-
Typically this means you run Cortex behind a reverse proxy, and ensure
14-
that all callers, both machines sending data over the remote_write
13+
Typically this means you run Cortex behind a reverse proxy, and you must
14+
ensure that all callers, both machines sending data over the `remote_write`
1515
interface and humans sending queries from GUIs, supply credentials
1616
which identify them and confirm they are authorised.
1717

18-
When configuring the remote_write API in Prometheus there is no way to
18+
When configuring the `remote_write` API in Prometheus there is no way to
1919
add extra headers. The user and password fields of http Basic auth, or
20-
Bearer token, can be used to convey tenant ID and/or credentials.
20+
Bearer token, can be used to convey the tenant ID and/or credentials.
21+
22+
To disable the multi-tenant functionality, you can pass the argument
23+
`-auth.enabled=false` to every Cortex component, which will set the OrgID
24+
to the string `fake` for every request.

0 commit comments

Comments
 (0)