Idea: Allow remote write only from specific tenants

[anushanagireddy0430]

What is the problem you are trying to solve?

Configured Mimir with Basic Auth and sending metrics via remotewrite option from 2 different consumers by setting X-Scope-OrgId in the headers.

1. How can we restrict mimir to only accept write requests from known tenantID's or consumer's.

2. Any way to implement External Authentication in mimir eg: Microsoft Entra ID

Which solution do you envision (roughly)?

Config option like --allowed-tenants to allow write or read from known tenants

Have you considered any alternatives?

No response

Any additional context to share?

No response

How long do you think this would take to be developed?

Not sure

What are the documentation dependencies?

No response

Proposer?

No response

[56quarters]

How can we restrict mimir to only accept write requests from known tenantID's or consumer's.

No, this must be handled by whatever authentication you put in front of Mimir.

Any way to implement External Authentication in mimir eg: Microsoft Entra ID

This is up to you and whatever external authentication you choose. Mimir only cares about the X-Scope-OrgID header which must be set by your authentication layer.