Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-20523

Uniformize Prometheus, Grafana and Chronograf auth in the DM-EFD deployment

    XMLWordPrintable

    Details

    • Type: Story
    • Status: To Do
    • Resolution: Unresolved
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      Currently a user on the lsst-sqre GH org and on the friends team only cannot login to Grafana.

      t=2019-07-11T16:45:25+0000 lvl=info msg="Request Completed" logger=context userId=0 orgId=0 uname= method=GET path=/login/github status=302 remote_addr=10.42.0.35 time_ms=0 size=307 referer=https://test-grafana-efd.lsst.codes/login
      t=2019-07-11T16:45:25+0000 lvl=info msg="state check" logger=oauth queryState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500 cookieState=37582a12f5e350cf222479675401a6156f9754418bc3a505b0b15163c9dd3500
      t=2019-07-11T16:45:26+0000 lvl=eror msg="User not a member of one of the required teams" logger=context userId=0 orgId=0 uname=
      

      We should use only lsst-sqre GH org for all the GH OAuth applications and add invite users to the lsst-sqre friends team.

      Grafana, in particular, has a restriction on the GH org team and we should remove that or at least add both square and friends team_ids to that configuration.

      https://github.com/lsst-sqre/terraform-efd/blob/master/charts/prometheus-operator.yaml#L106

        Attachments

          Activity

          There are no comments yet on this issue.

            People

            Assignee:
            afausti Angelo Fausti
            Reporter:
            afausti Angelo Fausti
            Watchers:
            Angelo Fausti
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:

                Jenkins

                No builds found.