X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e7e011e1fce68c484724073acd588655a2a10875..443a0b96316ed46600dc5035193adae6ac4d1f74:/services/keep-balance/server.go

diff --git a/services/keep-balance/server.go b/services/keep-balance/server.go
index c47305aefc..613a2f7d3c 100644
--- a/services/keep-balance/server.go
+++ b/services/keep-balance/server.go
@@ -13,8 +13,9 @@ import (
 	"time"
 
 	"git.curoverse.com/arvados.git/sdk/go/arvados"
+	"git.curoverse.com/arvados.git/sdk/go/auth"
 	"git.curoverse.com/arvados.git/sdk/go/httpserver"
-	"github.com/Sirupsen/logrus"
+	"github.com/sirupsen/logrus"
 )
 
 var version = "dev"
@@ -40,6 +41,9 @@ type Config struct {
 	// address, address:port, or :port for management interface
 	Listen string
 
+	// token for management APIs
+	ManagementToken string
+
 	// How often to check
 	RunPeriod arvados.Duration
 
@@ -121,7 +125,9 @@ func (srv *Server) start() error {
 	}
 	server := &httpserver.Server{
 		Server: http.Server{
-			Handler: httpserver.LogRequests(srv.Logger, srv.metrics.Handler(srv.Logger)),
+			Handler: httpserver.LogRequests(srv.Logger,
+				auth.RequireLiteralToken(srv.config.ManagementToken,
+					srv.metrics.Handler(srv.Logger))),
 		},
 		Addr: srv.config.Listen,
 	}