M45: authenticate Prometheus scraping

2026-08-21 18:33:23 +02:00
parent acd8b82b09
commit ec02aca0fd
4 changed files with 22 additions and 5 deletions
@@ -1,5 +1,14 @@
 # Project state

+## M45 — authenticate production metrics scraping (2026-08-21)
+
+- Pre-deployment inspection confirmed production protects `/metrics` with a non-empty
+  bearer token. Prometheus now renders that token into its private scrape authorization
+  config at container start instead of silently receiving HTTP 401.
+- Validation: the real pinned Prometheus and Alertmanager images started with rendered
+  configs; `promtool` accepted the configuration and all seven alert rules.
+- Exact next action: push M45, then execute the M44/M45 production release procedure.
+
 ## M44 — release integrity and assurance hardening (2026-08-21)

 - Replaced mutable archive overlays with checksum-verified, commit-named release staging,