From 6aeb8ac6d1475e5c6718d16bcc8729c220cc1385 Mon Sep 17 00:00:00 2001
From: Filip Barl <filip.barl@gmail.com>
Date: Wed, 27 Feb 2019 13:42:39 +0100
Subject: [PATCH] Extend FAQ with basic auth through env variables.

---
 site/faq.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/site/faq.md b/site/faq.md
index 2db1afe9e5..184daf7285 100644
--- a/site/faq.md
+++ b/site/faq.md
@@ -33,14 +33,34 @@ OSS Scope has no user concept, this is only available in Weave Cloud. To limit t
         Password for basic authentication (default "admin")
   -app.basicAuth.username string
         Username for basic authentication (default "admin")
+  -probe.basicAuth
+        Enable basic authentication for app
+  -probe.basicAuth.password string
+        Password for basic authentication (default "admin")
+  -probe.basicAuth.username string
+        Username for basic authentication (default "admin")
+  ```
+
+  or alternatively set the environment variables to use the same authentication for Scope app and Scope probe:
+
+  ```cli
+  ENABLE_BASIC_AUTH: set to "true"
+  BASIC_AUTH_USERNAME: set to the desired user (default "admin")
+  BASIC_AUTH_PASSWORD: set to the desired password (default "admin")
   ```
 
+  Note that there is no standard programmatic way of expiring a session with Basic Auth, so the users would normally stayed logged in until the authentication params have changed. See [this article](https://en.wikipedia.org/wiki/Basic_access_authentication#Security) for more details.
+
 ## ARM Support
 
 - It required patches, @adivyoseph (on [#scope](https://weave-community.slack.com/messages/scope/)) had done some work on this.
 - [#2110](https://github.com/weaveworks/scope/issues/2110) says that scope's CI builds ARM32 (but not ARM64) for test-builds at least.
 - @errordeveloper says: It should be easy to add arm64 in CI, You can try and enable builds in ci on a branch.. In theory, you just need to build for `GOARCH=arm64`.
 
+## LDAP Support
+
+Scope doesn't support LDAP right now.
+
 ## Data Storage
 
 OSS Scope reports aren't persistent and the probe keeps the last 15 seconds of metrics in memory.