ory / hydra

The most scalable and customizable OpenID Certifiedā„¢ OpenID Connect and OAuth Provider on the market. Become an OpenID Connect and OAuth2 Provider over night. Broad support for related RFCs. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra
Apache License 2.0
15.64k stars 1.5k forks source link

Serve prometheus metrics from a dedicated port #3843

Open alnr opened 2 months ago

alnr commented 2 months ago

Preflight checklist

Ory Network Project

No response

Describe your problem

Prometheus metrics are currently only served from Hydra's admin port, to shield them from public access. This means it is currently impossible to scrape metrics from a Hydra instance invoked as hydra serve public.

Describe your ideal solution

Allow configuration of a dedicated port which serves only metrics and nothing else. hydra serve public should the open two ports. One for public access and one just for metrics. The Admin API must remain inaccessible for such processes.

Workarounds or alternatives

Keep scraping metrics from the admin port šŸ¤·

Version

any

Additional Context

low prio