You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/10/24 14:09:34 UTC

[GitHub] [apisix] mathieuronvelmove opened a new issue, #8161: help request: include KeyCloak user id as Consumer for Prometheus

mathieuronvelmove opened a new issue, #8161:
URL: https://github.com/apache/apisix/issues/8161

   ### Description
   
   Used plugins:
   * prometheus
   * openid-connect
   * authz-keycloak
   
   Standalone mode is used.
   
   Prometheus is providing metrics of called endpoints.
   For example: 
   ```
   apisix_http_status{code="302",route="routes#2",matched_uri="/my-path",matched_host="",service="",consumer="",node="xxx.xxx.xxx.xxx"} 6
   ```
   
   However, the consumer field is empty despite users have been authenticated through KeyCloak.
   Is there a way to match KeyCloak users as Apisix consumers? If yes, could you describe the way to achieve this?
   
   I read this discussion which shows we can have consumers in Prometheus metrics but I don't know how to achieve this with openid-connect.
   https://github.com/apache/apisix/discussions/7332
   
   
   ### Environment
   
   - APISIX version (run `apisix version`): 2.15.0 (Docker apache/apisix:2.15.0-alpine)
   - Operating system (run `uname -a`): Ubuntu SMP Wed May 18 14:30:56 UTC 2022 x86_64 Linux
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): nginx version: openresty/1.21.4.1
   - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): standalone mode
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] mathieuronvelmove commented on issue #8161: help request: include KeyCloak user id as Consumer for Prometheus

Posted by GitBox <gi...@apache.org>.
mathieuronvelmove commented on issue #8161:
URL: https://github.com/apache/apisix/issues/8161#issuecomment-1292717971

   Thank you for the answer!
   
   As workaround, I defined Consumers with `key-auth` plugin.
   It forces our clients to provide a static key as header to identify them but it's working.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] mathieuronvelmove closed issue #8161: help request: include KeyCloak user id as Consumer for Prometheus

Posted by GitBox <gi...@apache.org>.
mathieuronvelmove closed issue #8161: help request: include KeyCloak user id as Consumer for Prometheus
URL: https://github.com/apache/apisix/issues/8161


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] tokers commented on issue #8161: help request: include KeyCloak user id as Consumer for Prometheus

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #8161:
URL: https://github.com/apache/apisix/issues/8161#issuecomment-1289831855

   The consumer concept is designed for authentication ways handled by apisix while openid connect is not one of them and consumer is not appropriate for it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org