creating a tenant for mimir

[rosh0450]

In multi tenancy mode, how do i create multiple tenants for mimir and setup authentication and authorization for it using bearer token.
This page https://grafana.com/docs/mimir/latest/manage/secure/authentication-and-authorization/ talks a bit about this, but doesn't tell how to create a tenant and generate token for it.

I see installing mimir with this config, automatically create the tenants

runtimeConfig:
  overrides:
    tenant-infra:
      max_global_series_per_user: 100000000
      ingestion_rate: 5000000
      compactor_blocks_retention_period: 30d

    tenant-test:
      max_global_series_per_user: 100000
      ingestion_rate: 5000
      compactor_blocks_retention_period: 1d

but how to generate token for these?

thanks.

[pstibrany]

Hello,

Mimir does not provide authentication or authorization, and trusts X-Scope-OrgID header from clients. Mimir creates tenants automatically as soon as the tenant (identified by that header) starts writing data to Mimir.

This means that you will need to have custom proxy in front of Mimir to do authentication/authorization and set this header based on outcome of the check.

[Jeongseup]

Thank you ! I wanted to find same question.

[Syndlex]

Hey @pstibrany,

is this also true when using the otlp endpoint?
Just set the X-Scope-OrgID header?