# Promethus configuration for awx authenticated metrics endpoint?

**URL:** <https://forum.ansible.com/t/promethus-configuration-for-awx-authenticated-metrics-endpoint/37273>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [October 27, 2022, 2:55pm UTC](https://forum.ansible.com/t/promethus-configuration-for-awx-authenticated-metrics-endpoint/37273 "2022-10-27T14:55:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![howardjones](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/howardjones/32/4169_2.png) [@howardjones](https://forum.ansible.com/u/howardjones)\
**Post date:** [October 27, 2022, 2:55pm UTC](https://forum.ansible.com/t/promethus-configuration-for-awx-authenticated-metrics-endpoint/37273/1 "2022-10-27T14:55:37Z")

</div>

Does anyone have an example configuration for Prometheus monitoring of awx that doesn't require putting the api secret in the prometheus config?

awx has an metrics endpoint, but it is authenticated. I can create a new read-only token, and put that in a kubernetes Secret. Our normal prometheus config would be to add annotations to the Service or Pod so prometheus autodiscovery will find the new metrics, and I see that I can do that with awx-operator, by adding service\_annotations to the awxs object. However, I don't see a way to refer to the Secret or even the token itself in plain text, as an annotation.

I'd rather not add manual configuration in the prometheus server if I can avoid it. Does anyone have this working?

We are not currently using prometheus-operator.

Thanks,

Howard

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [October 28, 2022, 5:13pm UTC](https://forum.ansible.com/t/promethus-configuration-for-awx-authenticated-metrics-endpoint/37273/2 "2022-10-28T17:13:33Z")

</div>

Hi!

this PR [https://github.com/ansible/awx/pull/12832](https://github.com/ansible/awx/pull/12832) attempts to allow the metrics endpoint to be scraped without authentication. We are still discussing whether we’d want this to be unauthenticated, even under a settings knob.

please feel free to drop additional ideas as a comment on that PR

AWX Team