diff options
| author | Christopher Baines <mail@cbaines.net> | 2016-03-01 08:46:26 +0000 |
|---|---|---|
| committer | Christopher Baines <mail@cbaines.net> | 2016-03-01 08:46:26 +0000 |
| commit | 87356498c78598144534906b199e2887102eeee0 (patch) | |
| tree | e73db7be5294d46d04542b0df5cfe084d9c8d398 | |
| parent | 2b48284510eba72df0499bf7eeba308a2768c396 (diff) | |
| parent | 7ea87dd5616e173fdf5dce2e030af051be79e2c9 (diff) | |
| download | prometheus-pgbouncer-exporter-87356498c78598144534906b199e2887102eeee0.tar prometheus-pgbouncer-exporter-87356498c78598144534906b199e2887102eeee0.tar.gz | |
Merge tag 'v1.7' into debian
Release 1.7
| -rw-r--r-- | CHANGELOG | 7 | ||||
| -rw-r--r-- | README | 14 | ||||
| -rw-r--r-- | prometheus-pgbouncer-exporter.conf | 3 | ||||
| -rw-r--r-- | prometheus_pgbouncer_exporter/__init__.py | 2 |
4 files changed, 25 insertions, 1 deletions
@@ -1,3 +1,10 @@ +prometheus-pgbouncer-exporter (1.7) + + * Include the port setting in the example configuration file + * Add note in the README about authentication + + -- Christopher Baines <mail@cbaines.net> Tue, 01 Mar 2016 08:45:45 +0000 + prometheus-pgbouncer-exporter (1.6) * Make the pgbouncer host configurable @@ -23,3 +23,17 @@ repository. Alternatively, you can download a binary package from here: I would recommend installing using setuptools, then running the promtheus-pgbouncer-exporter script. A systemd service file is provided which can be used if you have systemd. + +## Authentication + +The service connects to the pgbouncer admin console to gather metrics. The +service file runs the service as the postgres user (which is assumed to be the +user which pgbouncer is running as), such that it can access the admin console +(for which access is allowed if the login comes from via a Unix socket and the +client has the same user id as the pgbouncer service). + +This setup does mean that the exporter service (when running as the postgres +user) has far more capabilities than it requires. A more secure approach is to +run the service as a unprivileged user, which is listed in the stats_users +configuration parameter, as this means the process does not have to run as the +postgres user, and will be restricted to using the SHOW command. diff --git a/prometheus-pgbouncer-exporter.conf b/prometheus-pgbouncer-exporter.conf index 7f8cbfd..c63ac23 100644 --- a/prometheus-pgbouncer-exporter.conf +++ b/prometheus-pgbouncer-exporter.conf @@ -8,6 +8,9 @@ # Host on which to expose metrics #host = 0.0.0.0 +# Port on which to expose metrics +#port = 9127 + # Port to connect to pgbouncer #pgbouncer-port = 6432 diff --git a/prometheus_pgbouncer_exporter/__init__.py b/prometheus_pgbouncer_exporter/__init__.py index 1ab0f46..45b81bf 100644 --- a/prometheus_pgbouncer_exporter/__init__.py +++ b/prometheus_pgbouncer_exporter/__init__.py @@ -1,3 +1,3 @@ __ver_major__ = 1 -__ver_minor__ = 6 +__ver_minor__ = 7 __version__ = "%d.%d" % (__ver_major__, __ver_minor__) |