discovr

HTTP service discovery for Prometheus, backed by cloud provider APIs.

discovr exposes one endpoint per provider that returns your running instances in the http_sd_config format, so Prometheus can scrape them without a static target list. Provider credentials are never stored: Prometheus passes them per request as a bearer token, and discovr forwards them to the provider API.

Supported providers:

Targets are returned on port 9100 (the Prometheus node_exporter default). Instance metadata is exposed as __meta_<provider>_* labels; use Prometheus relabel_configs to keep the ones you want.

Install

With uv:

uv tool install discovr-ngine
discovr --host 0.0.0.0 --port 8000

Or with the container image:

docker run --rm -p 8000:8000 ghcr.io/ngine-io/discovr:latest

Interactive API docs are then served at http://localhost:8000/.

Configure

All settings are optional and read from the environment or a local .env file.

Use with Prometheus

scrape_configs:
  - job_name: cloudscale.ch nodes
    http_sd_configs:
      - url: "http://discovr:8000/v1/cloudscale-ch"
        authorization:
          type: Bearer
          credentials: <your-cloudscale-api-token>

discovr has no authentication of its own — the bearer token is the provider credential. Run it on a trusted network, or put it behind a reverse proxy that terminates TLS and restricts access. Use a read-only API token of your provider if possible.

A runnable Prometheus setup is in sample/:

docker compose up

Develop

uv sync           # create the virtualenv and install everything
uv run discovr --reload
uv run pytest
uv run ruff check .
uv run ruff format .

License

Apache-2.0