Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-20523

Uniformize Prometheus, Grafana and Chronograf auth in the DM-EFD deployment

    Details

    • Type: Story
    • Status: To Do
    • Resolution: Unresolved
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      Currently a user on the lsst-sqre GH org and on the friends team only cannot login to Grafana.

      t=2019-07-11T16:45:25+0000 lvl=info msg="Request Completed" logger=context userId=0 orgId=0 uname= method=GET path=/login/github status=302 remote_addr=10.42.0.35 time_ms=0 size=307 referer=https://test-grafana-efd.lsst.codes/login
      t=2019-07-11T16:45:25+0000 lvl=info msg="state check" logger=oauth queryState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500 cookieState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500
      t=2019-07-11T16:45:26+0000 lvl=eror msg="User not a member of one of the required teams" logger=context userId=0 orgId=0 uname=
      

      We should use only lsst-sqre GH org for all the GH OAuth applications and add invite users to the lsst-sqre friends team.

      Grafana, in particular, has a restriction on the GH org team and we should remove that or at least add both square and friends team_ids to that configuration.

      https://github.com/lsst-sqre/terraform-efd/blob/master/charts/prometheus-operator.yaml#L106

        Attachments

          Activity

          There are no comments yet on this issue.

            People

            • Assignee:
              afausti Angelo Fausti
              Reporter:
              afausti Angelo Fausti
              Watchers:
              Angelo Fausti
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:

                Summary Panel