promql-guard

• go
• prometheus

prototype

---

PromQL Guard provides a thin proxy on top of Prometheus, that allows us to inspect and re-write promql queries, so that a tenant can only see the data we allow, even when using a shared Prometheus server. The original intended use case, is managing multiple Grafana instances for tenants, though there is nothing Grafana specific in the implementation.