Page MenuHomePhabricator

Allow project members/admins to ack/silence alerts of that project
Open, MediumPublic

Description

Alertmanager itself doesn't have any authentication/authorization built into it, so we'll likely need to write some sort of proxy and put it in front of alertmanager.

Event Timeline

Looks like the karma alert dashboard (https://vpsalertmanager.toolforge.org) suppots auth ACLs as well. This still leaves the "authenticate developer account in WMCS realm" problem to be solved.

https://prometheus-alerts.wmcloud.org is now testing the auth service created in subtask, and lets a hardcoded list of people perform writes

Change 709066 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] metricsinfra: add karma with cas

https://gerrit.wikimedia.org/r/709066

Change 709066 merged by Bstorm:

[operations/puppet@production] metricsinfra: add karma with cas

https://gerrit.wikimedia.org/r/709066

Majavah triaged this task as Medium priority.Aug 2 2021, 7:14 PM