diff options
| author | Costa Tsaousis <costa@netdata.cloud> | 2022-11-29 17:28:17 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-11-29 17:28:17 +0200 |
| commit | 811028aea2f146cc0ac2bc403f7d692add400d63 (patch) | |
| tree | 99465acbb31ebb6ba5316bdabfa620b2d89b9b63 /streaming/stream.conf | |
| parent | 4de2ce54d59a4128425f8dde5924eed4fc6dad97 (diff) | |
Strict control of streaming API keys and MACHINE GUIDs in stream.conf (#14063)
do not allow machine guids to be used as API keys
Diffstat (limited to 'streaming/stream.conf')
| -rw-r--r-- | streaming/stream.conf | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/streaming/stream.conf b/streaming/stream.conf index cbaab1919e..7c9ccc9b8e 100644 --- a/streaming/stream.conf +++ b/streaming/stream.conf @@ -111,6 +111,11 @@ [API_KEY] # Default settings for this API key + # This GUID is to be used as an API key from remote agents connecting + # to this machine. Failure to match such a key, denies access. + # YOU MUST SET THIS FIELD ON ALL API KEYS. + type = api + # You can disable the API key, by setting this to: no # The default (for unknown API keys) is: no enabled = no @@ -187,6 +192,11 @@ # you can give settings for each sending host here. [MACHINE_GUID] + # This GUID is to be used as a MACHINE GUID from remote agents connecting + # to this machine, not an API key. + # YOU MUST SET THIS FIELD ON ALL MACHINE GUIDs. + type = machine + # enable this host: yes | no # When disabled, the parent will not receive metrics for this host. # THIS IS NOT A SECURITY MECHANISM - AN ATTACKER CAN SET ANY OTHER GUID. |