Page MenuHomePhabricator

grafana-cloud: Browser access to Prometheus is deprecated
Closed, ResolvedPublic

Description

I saw this when adding toolsbeta-prometheus to grafana-cloud:

image.png (221×837 px, 19 KB)

Grafana-cloud (aka grafana-labs) is hosted on production hardware (cloudmetrics100x.eqiad.wmnet). It has two main datasources:

  • graphite-labs, hosted on the same hardward and available publicly. This works now but graphite in general is being phased out.
  • Various Prometheus instances hosted on the cloud realm. Since the cloudmetrics hosts can't access production directly, these use the grafana setting to have browser javascript run the Prometheus queries (which is now deprecated upstream).

There's also an another Prometheus instance running on cloudmetrics hardware, but that one is only currently added to grafana.wm.o (not grafana-cloud).

Event Timeline

Proposal:

Replace this Grafana instance with an another one running on Cloud VPS (in the metricsinfra project or in a separate one), as it is pretty much only used to query data for toolforge and cloud vps instances (and not the vps infrastructure in the production realm). Since graphite/statsd are already deprecated, they can remain on cloudmetrics at least for now. graphite-labs.wm.o is a public endpoint so dashboards will continue to work. Dashboards about the production infrastructure can be moved to the main Grafana instance.

see also: T207543: Move labmon (Graphite, StatsD) into a Cloud VPS

+1 from me, thanks @Majavah for the proposal!

Change 869208 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:grafana: move some profile declarations to roles

https://gerrit.wikimedia.org/r/869208

Change 869209 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:grafana: make the logo file customizable

https://gerrit.wikimedia.org/r/869209

Change 869210 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:metricsinfra: add profile and role for a Grafana server

https://gerrit.wikimedia.org/r/869210

Change 869211 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:wmcs::metricsinfra: add haproxy config for grafana

https://gerrit.wikimedia.org/r/869211

Change 871289 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] grafana: move dashboard config to a new define

https://gerrit.wikimedia.org/r/871289

Change 871290 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:grafana: stop provisioning home dashboard

https://gerrit.wikimedia.org/r/871290

Change 871291 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:wmcs::metricsinfra: add internal name for prometheus

https://gerrit.wikimedia.org/r/871291

Change 871292 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:wmcs::metricsinfra::grafana: configure data sources

https://gerrit.wikimedia.org/r/871292

Change 869208 merged by Filippo Giunchedi:

[operations/puppet@production] P:grafana: move some profile declarations to roles

https://gerrit.wikimedia.org/r/869208

Change 869209 merged by Filippo Giunchedi:

[operations/puppet@production] P:grafana: make the logo file customizable

https://gerrit.wikimedia.org/r/869209

Change 871290 merged by Herron:

[operations/puppet@production] P:grafana: stop provisioning home dashboard

https://gerrit.wikimedia.org/r/871290

Change 869210 merged by David Caro:

[operations/puppet@production] P:metricsinfra: add profile and role for a Grafana server

https://gerrit.wikimedia.org/r/869210

Change 869211 merged by David Caro:

[operations/puppet@production] P:wmcs::metricsinfra: add haproxy config for grafana

https://gerrit.wikimedia.org/r/869211

Change 871291 merged by David Caro:

[operations/puppet@production] P:wmcs::metricsinfra: add internal name for prometheus

https://gerrit.wikimedia.org/r/871291

Change 871292 merged by David Caro:

[operations/puppet@production] P:wmcs::metricsinfra::grafana: configure data sources

https://gerrit.wikimedia.org/r/871292

fnegri changed the task status from Open to In Progress.Feb 1 2023, 10:14 AM
fnegri triaged this task as Medium priority.
fnegri moved this task from Backlog to In progress on the cloud-services-team (FY2022/2023-Q3) board.

Status update: https://grafana.wmcloud.org is now running. Next step is to move over the dashboards.

I created T333568 to track the dashboard migration work, hoping it can be prioritized for next quarter (Q4).

Change 947933 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] Disable access to grafana-labs/cloud.wm.o

https://gerrit.wikimedia.org/r/947933

Change 947933 merged by Filippo Giunchedi:

[operations/puppet@production] Disable access to grafana-labs/cloud.wm.o

https://gerrit.wikimedia.org/r/947933