From 7812761ab4f9da722ae3770886dc328b5b3210df Mon Sep 17 00:00:00 2001 From: Aliaksandr Valialkin Date: Sat, 1 Oct 2022 18:56:56 +0300 Subject: [PATCH] docs/Cluster-VictoriaMetrics.md: add a security note for multitenant support via labels --- docs/Cluster-VictoriaMetrics.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/Cluster-VictoriaMetrics.md b/docs/Cluster-VictoriaMetrics.md index ffe7aeabbd..abe9c8a316 100644 --- a/docs/Cluster-VictoriaMetrics.md +++ b/docs/Cluster-VictoriaMetrics.md @@ -84,6 +84,9 @@ while the `http_requests_total{path="/bar"} 34` would be stored in the tenant `a The `vm_account_id` and `vm_project_id` labels are extracted after applying the [relabeling](https://docs.victoriametrics.com/relabeling.html) set via `-relabelConfig` command-line flag, so these labels can be set at this stage. +**Security considerations:** it is recommended restricting access to `multitenant` endpoints only to trusted sources, +since untrusted source may break per-tenant data by writing unwanted samples to aribtrary tenants. + ## Binaries