Page MenuHomePhabricator

Setting up grafana should also setup Anonymous read-only access for the default org
Open, Stalled, MediumPublic

Description

One is just the readonly version of the other, setup with exactly the same setup as production. But garafana-labs is empty and unusable...

When first setting up Grafana on a new machine, the Anonymous user should have read-only access to the default organization for Grafana to work out of the box and have public dashboards.

Details

Related Gerrit Patches:
operations/puppet : productiongraphite: parametrize cors_origins for labs

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 22 2016, 2:57 PM

some progress: the global user "Anonymous" lacked "Viewer" access to the default/main organization, now all dashboards are visible on https://grafana-labs.wikimedia.org

the graphite data source still yields 403, but e.g. prometheus datasource works as expected

Mentioned in SAL [2016-08-24T16:50:45Z] <godog> bounce uwsgi on labmon1001 T143556

Change 306467 had a related patch set uploaded (by Filippo Giunchedi):
graphite: parametrize cors_origins for labs

https://gerrit.wikimedia.org/r/306467

Change 306467 merged by Filippo Giunchedi:
graphite: parametrize cors_origins for labs

https://gerrit.wikimedia.org/r/306467

cors is fixed, the only bit left to automate is changing files/grafana/grafana_create_anon_user to also add Viewer rights to Anonymous for the default organization (i.e. table org_user) once created

fgiunchedi removed fgiunchedi as the assignee of this task.Sep 6 2016, 10:35 AM

unassigning as I don't think I'll have time to work on the last bit (add Anonymous viewer rights to the default org by default)

Volans triaged this task as Medium priority.Nov 23 2016, 9:02 AM
fgiunchedi renamed this task from grafana-labs.wikimedia.org doesn't reflect grafana-labs-admin.wikimedia.org to Setting up grafana should also setup Anonymous read-only access for the default org.Nov 23 2016, 8:27 PM
fgiunchedi changed the task status from Open to Stalled.
fgiunchedi updated the task description. (Show Details)
fgiunchedi moved this task from Inbox to Backlog on the observability board.Dec 10 2019, 2:17 PM