Skip to content

Grafana Setup

  1. Create ServiceAccount for Grafana:
    oc create serviceaccount grafana-sa -n <grafana-namespace>
    oc adm policy add-cluster-role-to-user cluster-monitoring-view -z grafana-sa -n <grafana-namespace>
    
  2. Create Service Account Token for the SA.
    vi grafanaSecretToken.yaml
    

apiVersion: v1
kind: Secret
metadata:
    name: grafana-sa-token
    namespace: <grafana-namespace>
    annotations:
        kubernetes.io/service-account.name: grafana-sa
type: kubernetes.io/service-account-token
3. Copy the secret:
oc get secret -n <grafana-ns> grafana-sa-token -o jsonpath='{.data.token}' | base64 -d
4. Find the Thanos Querier service:
https://thanos-querier.openshift-monitoring.svc.cluster.local:9091
5. In Grafana, add new data source -> prometheus
Skip TLS Certificate Validation

HTTP headers:
Authorization | Bearer <grafana-sa-token>