Allow config to restrict hosts allowed to scrape metrics

[Haw Loeung]

Hi,

It looks like telegraf has an option to restrict access to specific hosts allowed to scrape metrics:

| [[outputs.prometheus_client]]
| ## Use HTTP Basic Authentication.
| # basic_username = "Foo"
| # basic_password = "Bar"
|
| ## If set, the IP Ranges which are allowed to access metrics.
| ## ex: ip_range = ["192.168.0.0/24", "192.168.1.0/30"]
| # ip_range = []

Can we have the charm expose these two? Specifically, we'd like ip_range but basic authentication I think would also be useful for users.

Thanks,

Haw

[Haw Loeung (hloeung)]

Any chance this could be prioritised higher? We have machines deployed on edge and in various public clouds where Juju would open up access to all. Would be nice to lock down / restrict at least via ip_range.

[Junien F (axino)]

If I'm reading templates/telegraf.conf.tmpl right, you can already do that via the juju config option "extra_options"