Summary:

• Take a look at the kube-rbac-proxy code. See if it could be modified to work with openstack RBAC. -not easily
• Take a look at an openstack service API.
• Modify code from previous POC to work without Thanos as a container directly inside the Prometheus Pod.

Goal:

• If possible, create a POC, where a container could be placed in front of Prometheus, which would allow openstack RBAC enforced access to metrics.

TimeBox:

• 1 week

Deliverables/Outcomes:

• A POC of a single container sidecar to achieve tenancy enforcement for metrics queries coming from OpenStack.