Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-16549

Enable GitHub OAuth 2.0 authentication in Chronograf

    Details

    • Type: Story
    • Status: Done
    • Resolution: Done
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      Chronograf supports using GitHub OAuth 2.0 authentication

        Attachments

          Activity

          Hide
          afausti Angelo Fausti added a comment -

          By default, access is restricted to the following github orgs:

           
          gh_orgs: "lsst-sqre,lsst-dm,lsst"
          
          

          Show
          afausti Angelo Fausti added a comment - By default, access is restricted to the following github orgs:   gh_orgs: "lsst-sqre,lsst-dm,lsst"
          Hide
          afausti Angelo Fausti added a comment - - edited

          The first user in Chronograf is granted with Admin privileges, all new users are granted with the default role for their organizations.

          It is possible to map a github org to a chronograf org and set the defaut role for that org, this way the first time the user logs in it has the "expected" privileges.

          Chronograf roles are:

          • member (default role if the default organization role is not set, cannot do anything and needs action of the Admin to grant another role)
          • viewer (view only, but can use the Explore tool and create queries)
          • editor (can edit and create new dashboards for instance)
          • admin
          Show
          afausti Angelo Fausti added a comment - - edited The first user in Chronograf is granted with Admin privileges, all new users are granted with the default role for their organizations. It is possible to map a github org to a chronograf org and set the defaut role for that org, this way the first time the user logs in it has the "expected" privileges. Chronograf roles are: member (default role if the default organization role is not set, cannot do anything and needs action of the Admin to grant another role) viewer (view only, but can use the Explore tool and create queries) editor (can edit and create new dashboards for instance) admin
          Hide
          afausti Angelo Fausti added a comment -

          The GitHub SQuaRE org was mapped to a Chronograf org with default role set as Editor.

          Chronograf is now deployed with a PV in GKE in order to persist its configurations.

          Show
          afausti Angelo Fausti added a comment - The GitHub SQuaRE org was mapped to a Chronograf org with default role set as Editor. Chronograf is now deployed with a PV in GKE in order to persist its configurations.

            People

            • Assignee:
              afausti Angelo Fausti
              Reporter:
              afausti Angelo Fausti
              Watchers:
              Angelo Fausti
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Summary Panel