which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension)
SonarQube Developer Edition: 126.96.36.199929
Running on Kubernetes
what are you trying to achieve
Monitor computer resources and its health.
what have you tried so far to achieve this
write a synthetic monitoring script to call the /api/system/health endpoint though it requires user/password. The [Security] problem is that such user needs to have administrative rights and therefore becomes unnecessary exposure. Ideally, sonarqube should have a limited policy (that can be bind to user(s)) with scope of metrics/health ONLY. This would mitigate this security risk.
My question is: does anyone know a way to call such endpoint using a user with very limited scope?
Last but not least, have not found support for metrics via prometheus. It looks like that Sonarqube does not support that? How can we monitor compute resource utilization and set alert rules then?