From f60903cea932cd3460f8900c458edee133b09e93 Mon Sep 17 00:00:00 2001 From: Ian Littman Date: Tue, 7 Apr 2026 12:01:26 -0500 Subject: [PATCH] Don't turn Prometheus on in `--dev` mode (#43129) # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. ## Testing - [ ] QA'd all new/changed functionality manually --- changes/turn-off-prom-in-dev-mode | 1 + cmd/fleet/main.go | 3 --- 2 files changed, 1 insertion(+), 3 deletions(-) create mode 100644 changes/turn-off-prom-in-dev-mode diff --git a/changes/turn-off-prom-in-dev-mode b/changes/turn-off-prom-in-dev-mode new file mode 100644 index 0000000000..53bfe05202 --- /dev/null +++ b/changes/turn-off-prom-in-dev-mode @@ -0,0 +1 @@ +* No longer turn on Prometheus serving by default with a hard-coded username and password when the server is started with `--dev`. diff --git a/cmd/fleet/main.go b/cmd/fleet/main.go index e4dc313eeb..ab3287146c 100644 --- a/cmd/fleet/main.go +++ b/cmd/fleet/main.go @@ -108,9 +108,6 @@ func applyDevFlags(cfg *config.FleetConfig) { // that match our default dev setup. setIfEmpty(&cfg.Mysql.Password, "insecure") - setIfEmpty(&cfg.Prometheus.BasicAuth.Username, "fleet") - setIfEmpty(&cfg.Prometheus.BasicAuth.Password, "insecure") - setIfEmpty(&cfg.S3.CarvesBucket, "carves-dev") setIfEmpty(&cfg.S3.CarvesRegion, "localhost") setIfEmpty(&cfg.S3.CarvesPrefix, "dev-prefix")