Grafana Setup
- Create ServiceAccount for Grafana:
oc create serviceaccount grafana-sa -n <grafana-namespace>
oc adm policy add-cluster-role-to-user cluster-monitoring-view -z grafana-sa -n <grafana-namespace>
- Create Service Account Token for the SA.
vi grafanaSecretToken.yaml
apiVersion: v1
kind: Secret
metadata:
name: grafana-sa-token
namespace: <grafana-namespace>
annotations:
kubernetes.io/service-account.name: grafana-sa
type: kubernetes.io/service-account-token
3. Copy the secret:
oc get secret -n <grafana-ns> grafana-sa-token -o jsonpath='{.data.token}' | base64 -d
4. Find the Thanos Querier service:
https://thanos-querier.openshift-monitoring.svc.cluster.local:9091
5. In Grafana, add new data source -> prometheus
Skip TLS Certificate Validation
HTTP headers:
Authorization | Bearer <grafana-sa-token>