Skip to content

Secure communication for a distributed Thanos Deployment for Prometheus

Notifications You must be signed in to change notification settings

goatlas-io/website

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Atlas

Overview

Atlas at it's core is a small set of kubernetes operators that uses services and secrets resources as the underlying source of truth to populate a customized Envoy Aggreggated Service Discovery server which the Envoy proxies connect to and obtain their configurations to create the secure distributed envoy network that Thanos then traverses for connectivity.

Atlas provides Thanos Query the ability to connect to Thanos Sidecars securely over HTTP/2 authenticated via Mutual TLS. Additionally when an ingress on the observability cluster (where Atlas is installed) is configured properly, you can access every downstream cluster's individual Prometheus and Alert Manager web interfaces.

Finally Atlas provides the ability for EVERY downstream cluster's Prometheus instances to securely send alerts back to the observability alert managers over the HTTP/2 protected by Mutual TLS. This means that you can protect access to the alertmanager with something like an oauth2 proxy and not worry about how to allow the Prometheus instances to authenticate to it for sending alerts.

Atlas does not deploy Thanos or configure Thanos for you. Please see Atlas documentation on how to configure Thanos to use Atlas.

Documentation

Atlas is documented using Material for Mkdocs, see the full documentation for more on Atlas.

Architecture

Note: The downstream clusters scale N+1, but only communication with one is diagrammed.

There are no lines connected to Atlas because this is a diagram to show communication paths and Atlas is the silent orchestrator of the various components.

Atlas Architecture

About

Secure communication for a distributed Thanos Deployment for Prometheus

Topics

Resources

Stars

Watchers

Forks