-
Notifications
You must be signed in to change notification settings - Fork 101
Document how to correct the grafana invite link #968
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -692,7 +692,7 @@ cattle-monitoring-system prometheus-kubevirt-rules 24s // is missi | |||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Root Cause | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| When KubeVirt is newly installed or upgraded, it generates a new ConfigMap object to store the configuration. A race condition occurs within the KubeVirt operator if the `rancher-monitoring-operator` ServiceAccount object is missing/not synced from the `cattle-monitoring-system` namespace during this process. Consequently, the ServiceMonitor configuration may be excluded from the resulting ConfigMap object. | ||||||||||||||||||||||||||
| When KubeVirt is newly installed or upgraded, it generates a new ConfigMap object to store the configuration. A race condition occurs within the KubeVirt operator if the `rancher-monitoring-operator` ServiceAccount object is missing/not synced from the `cattle-monitoring-system` namespace during this process. Consequently, the ServiceMonitor configuration may be excluded from the resulting ConfigMap object. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| During the upgrade process, KubeVirt may incorrectly determine the monitoring state. Once the ConfigMap object is generated, KubeVirt does not reconcile or regenerate it until the next upgrade, unless a manual trigger is performed. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
|
|
@@ -790,3 +790,37 @@ The workaround involves ensuring that the `rancher-monitoring-operator` ServiceA | |||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#9674](https://github.com/harvester/harvester/issues/9674) | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ## The embedded grafana does not provid correct URL path for invite | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Issue Description | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. Be on Harvester Dashboard | ||||||||||||||||||||||||||
| 1. Click call-to-action/button to take us to Grafana landing page (rancher-monitoring) | ||||||||||||||||||||||||||
| 1. Login | ||||||||||||||||||||||||||
| 1. Click the gear-icon/button -> configuration -> then select 'users' tab (x-ref screengrab) | ||||||||||||||||||||||||||
| 1. Build a new user, no email | ||||||||||||||||||||||||||
| 1. Click the copy invite | ||||||||||||||||||||||||||
| 1. Notice that when pasted in the browser it is directing somewhere in-accessible by the user, for example: `http://localhost:3000/invite/3qq7sUO9n7MF3XfRH8YfDWR94pYhli` | ||||||||||||||||||||||||||
|
Comment on lines
+798
to
+804
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Root Cause | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| The `grafana` depolyment on Harvester is sitting behind the ingress controller. A prefix is appended to the URL automatically when user visits the grafana per guided steps from Harvester UI. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| However, the generated invite link is not sent to external directly, it is still a localhost based link and can't be accessed from external. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Workaround | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| Manually append the prefix like `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/` to the invite link and remove the `http://localhost:3000`. The final link is `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/invite/smVzjAUMSx0WKfl0giG1w0zEQ0d6ID` | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| :::note | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. This workaround also applies to other `grafana` local link, the link can be accessed from external after patching the prefix. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. When the Harvester cluster is imported to `Rancher Manager`, recommend to use [Role-based Access Control](https://ranchermanager.docs.rancher.com/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring) and disable the `grafana` password login. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ::: | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#5298](https://github.com/harvester/harvester/issues/5298) | ||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -790,3 +790,37 @@ The workaround involves ensuring that the `rancher-monitoring-operator` ServiceA | |||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#9674](https://github.com/harvester/harvester/issues/9674) | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ## The embedded grafana does not provid correct URL path for invite | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Issue Description | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. Be on Harvester Dashboard | ||||||||||||||||||||||||||
| 1. Click call-to-action/button to take us to Grafana landing page (rancher-monitoring) | ||||||||||||||||||||||||||
| 1. Login | ||||||||||||||||||||||||||
| 1. Click the gear-icon/button -> configuration -> then select 'users' tab (x-ref screengrab) | ||||||||||||||||||||||||||
| 1. Build a new user, no email | ||||||||||||||||||||||||||
| 1. Click the copy invite | ||||||||||||||||||||||||||
| 1. Notice that when pasted in the browser it is directing somewhere in-accessible by the user, for example: `http://localhost:3000/invite/3qq7sUO9n7MF3XfRH8YfDWR94pYhli` | ||||||||||||||||||||||||||
|
Comment on lines
+798
to
+804
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Root Cause | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| The `grafana` depolyment on Harvester is sitting behind the ingress controller. A prefix is appended to the URL automatically when user visits the grafana per guided steps from Harvester UI. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| However, the generated invite link is not sent to external directly, it is still a localhost based link and can't be accessed from external. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Workaround | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| Manually append the prefix like `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/` to the invite link and remove the `http://localhost:3000`. The final link is `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/invite/smVzjAUMSx0WKfl0giG1w0zEQ0d6ID` | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| :::note | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. This workaround also applies to other `grafana` local link, the link can be accessed from external after patching the prefix. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. When the Harvester cluster is imported to `Rancher Manager`, recommend to use [Role-based Access Control](https://ranchermanager.docs.rancher.com/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring) and disable the `grafana` password login. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ::: | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#5298](https://github.com/harvester/harvester/issues/5298) | ||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -790,3 +790,37 @@ The workaround involves ensuring that the `rancher-monitoring-operator` ServiceA | |||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#9674](https://github.com/harvester/harvester/issues/9674) | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ## The embedded grafana does not provid correct URL path for invite | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Issue Description | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. Be on Harvester Dashboard | ||||||||||||||||||||||||||
| 1. Click call-to-action/button to take us to Grafana landing page (rancher-monitoring) | ||||||||||||||||||||||||||
| 1. Login | ||||||||||||||||||||||||||
| 1. Click the gear-icon/button -> configuration -> then select 'users' tab (x-ref screengrab) | ||||||||||||||||||||||||||
| 1. Build a new user, no email | ||||||||||||||||||||||||||
| 1. Click the copy invite | ||||||||||||||||||||||||||
| 1. Notice that when pasted in the browser it is directing somewhere in-accessible by the user, for example: `http://localhost:3000/invite/3qq7sUO9n7MF3XfRH8YfDWR94pYhli` | ||||||||||||||||||||||||||
|
Comment on lines
+798
to
+804
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Root Cause | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| The `grafana` depolyment on Harvester is sitting behind the ingress controller. A prefix is appended to the URL automatically when user visits the grafana per guided steps from Harvester UI. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| However, the generated invite link is not sent to external directly, it is still a localhost based link and can't be accessed from external. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Workaround | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| Manually append the prefix like `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/` to the invite link and remove the `http://localhost:3000`. The final link is `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/invite/smVzjAUMSx0WKfl0giG1w0zEQ0d6ID` | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| :::note | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. This workaround also applies to other `grafana` local link, the link can be accessed from external after patching the prefix. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. When the Harvester cluster is imported to `Rancher Manager`, recommend to use [Role-based Access Control](https://ranchermanager.docs.rancher.com/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring) and disable the `grafana` password login. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ::: | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#5298](https://github.com/harvester/harvester/issues/5298) | ||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|
@@ -790,3 +790,37 @@ The workaround involves ensuring that the `rancher-monitoring-operator` ServiceA | |||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#9674](https://github.com/harvester/harvester/issues/9674) | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ## The embedded grafana does not provid correct URL path for invite | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Issue Description | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. Be on Harvester Dashboard | ||||||||||||||||||||||||||
| 1. Click call-to-action/button to take us to Grafana landing page (rancher-monitoring) | ||||||||||||||||||||||||||
| 1. Login | ||||||||||||||||||||||||||
| 1. Click the gear-icon/button -> configuration -> then select 'users' tab (x-ref screengrab) | ||||||||||||||||||||||||||
| 1. Build a new user, no email | ||||||||||||||||||||||||||
| 1. Click the copy invite | ||||||||||||||||||||||||||
| 1. Notice that when pasted in the browser it is directing somewhere in-accessible by the user, for example: `http://localhost:3000/invite/3qq7sUO9n7MF3XfRH8YfDWR94pYhli` | ||||||||||||||||||||||||||
|
Comment on lines
+798
to
+804
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Root Cause | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| The `grafana` depolyment on Harvester is sitting behind the ingress controller. A prefix is appended to the URL automatically when user visits the grafana per guided steps from Harvester UI. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| However, the generated invite link is not sent to external directly, it is still a localhost based link and can't be accessed from external. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Workaround | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| Manually append the prefix like `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/` to the invite link and remove the `http://localhost:3000`. The final link is `https://10.115.16.193/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/invite/smVzjAUMSx0WKfl0giG1w0zEQ0d6ID` | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| :::note | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. This workaround also applies to other `grafana` local link, the link can be accessed from external after patching the prefix. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| 1. When the Harvester cluster is imported to `Rancher Manager`, recommend to use [Role-based Access Control](https://ranchermanager.docs.rancher.com/integrations-in-rancher/monitoring-and-alerting/rbac-for-monitoring) and disable the `grafana` password login. | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ::: | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| ### Related Issue | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| [#5298](https://github.com/harvester/harvester/issues/5298) | ||||||||||||||||||||||||||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.