4:32 a.m.
oVirt 4.5.0.8-1.el8
I tried to connect to grafana via the monitoring portal link from the dash
and all panels are failing to display any data with varying error messages,
but all include 'Origin Not Allowed'
I navigated to Data Sources and ran a test on the PostgreSQL connection
(localhost) which threw the same Origin Not Allowed error message.
Any suggestions?
12:31 p.m.
That can happen if the builtin password for the engine database's
grafana user changes, or if you manually restore the grafana database
from a backup.
You could try resetting the password by copying it back into the data
source config in grafana's UI. (You'll need admin privlieges for
grafana to do so.)
The password for the engine database's grafana user should be located
in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-
database.conf on the engine host.
-Patrick Hibbs
On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote:
oVirt 4.5.0.8-1.el8
I tried to connect to grafana via the monitoring portal link from the
dash and all panels are failing to display any data with varying
error messages, but all include 'Origin Not Allowed'
I navigated to Data Sources and ran a test on the PostgreSQL
connection (localhost) which threw the same Origin Not Allowed error
message.
Any suggestions?
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL...
3:34 a.m.
I've not restored from a backup or changed the grafana databse user
password, no idea why this has 'just' stopped working (or when as I don't
look at grafana that often).
I tried updating the grafana db user password, but still no joy...
I grabbed the password from
/etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf -
GRAFANA_DB_PASSWD
and then updated the database user:
su - postgres
psql -d ovirt_engine_history
ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from config
file';
On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs <hibbsncc1701(a)gmail.com> wrote:
That can happen if the builtin password for the engine database's
grafana
user changes, or if you manually restore the grafana database from a backup.
You could try resetting the password by copying it back into the data
source config in grafana's UI. (You'll need admin privlieges for grafana to
do so.)
The password for the engine database's grafana user should be located in
/etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf
on the engine host.
-Patrick Hibbs
On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote:
oVirt 4.5.0.8-1.el8
I tried to connect to grafana via the monitoring portal link from the dash
and all panels are failing to display any data with varying error messages,
but all include 'Origin Not Allowed'
I navigated to Data Sources and ran a test on the PostgreSQL connection
(localhost) which threw the same Origin Not Allowed error message.
Any suggestions?
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL...
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJ...
7:42 a.m.
This worked for us:
edit /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf
add "ProxyPreserveHost On"
should look like this now:
<IfModule !mod_proxy>
LoadModule proxy_module modules/mod_proxy.so
</IfModule>
<Location /ovirt-engine-grafana>
ProxyPreserveHost On
ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On
ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana
</Location>
systemctl restart httpd
8:16 a.m.
Thanks Nardus,
ProxyPreserveHost did the trick, all seems to be working now.
On Mon, 13 Jun 2022 at 12:43, Nardus Geldenhuys <nardusg(a)gmail.com> wrote:
This worked for us:
edit /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf
add "ProxyPreserveHost On"
should look like this now:
<IfModule !mod_proxy>
LoadModule proxy_module modules/mod_proxy.so
</IfModule>
<Location /ovirt-engine-grafana>
ProxyPreserveHost On
ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On
ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana
</Location>
systemctl restart httpd
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TZFFIN4ESDY...
11:50 a.m.
I meant update the password in grafana's Web UI.
You can find it by going to the Monitoring Portal -> Gear Icon on the
left hand side -> Data Sources -> oVirt DWH -> PostgreSQL Connection.
There you can change the parameters used by grafana to connect to the
engine database. (You'll have to hit the reset button to allow updating
the password.)
*Note: The gear icon will only show up if the logged in user has
administrative permissions within grafana. Only the built in oVirt
admin user (admin@internal-authz) has this permission by default. But
you can delegate those permissions within grafana.
- Patrick Hibbs
On Mon, 2022-06-13 at 08:34 +0100, Maton, Brett wrote:
I've not restored from a backup or changed the grafana databse
user
password, no idea why this has 'just' stopped working (or when as I
don't look at grafana that often).
I tried updating the grafana db user password, but still no joy...
I grabbed the password from /etc/ovirt-engine-dwh/ovirt-engine-
dwhd.conf.d/10-setup-grafana-database.conf - GRAFANA_DB_PASSWD
and then updated the database user:
su - postgres
psql -d ovirt_engine_history
ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from
config file';
On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs <hibbsncc1701(a)gmail.com>
wrote:
> That can happen if the builtin password for the engine database's
> grafana user changes, or if you manually restore the grafana
> database from a backup.
>
> You could try resetting the password by copying it back into the
> data source config in grafana's UI. (You'll need admin privlieges
> for grafana to do so.)
> The password for the engine database's grafana user should be
> located in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-
> grafana-database.conf on the engine host.
>
> -Patrick Hibbs
>
> On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote:
> > oVirt 4.5.0.8-1.el8
> >
> > I tried to connect to grafana via the monitoring portal link from
> > the dash and all panels are failing to display any data with
> > varying error messages, but all include 'Origin Not Allowed'
> >
> > I navigated to Data Sources and ran a test on the PostgreSQL
> > connection (localhost) which threw the same Origin Not Allowed
> > error message.
> >
> > Any suggestions?
> > _______________________________________________
> > Users mailing list -- users(a)ovirt.org
> > To unsubscribe send an email to users-leave(a)ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> >
>
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL...
>
>
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
>
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJ...
7:19 a.m.
according to grafana:
https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-wit...
it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5.
As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15:
******
# grafana-server -v
Version 7.5.15 (commit: NA, branch: master)
******
the described configuration of "ProxyPreserveHost" for Host header is needed!
Can the dev. team take this configuration to
/etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf
for the next update?
It is not the option to change the default config after every update.
4:03 a.m.
Hi,
this should already be fixed by https://github.com/oVirt/ovirt-dwh/pull/38
included in ovirt-engine-dwh-4.5.3,
which should be part of upcoming oVirt 4.5.1 release.
Regards,
Martin
On Tue, Jun 14, 2022 at 1:20 PM Igor Davidoff <igor.davidoff(a)cloudkleyer.de>
wrote:
according to grafana:
https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-wit...
it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5.
As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15:
******
# grafana-server -v
Version 7.5.15 (commit: NA, branch: master)
******
the described configuration of "ProxyPreserveHost" for Host header is
needed!
Can the dev. team take this configuration to
/etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf
for the next update?
It is not the option to change the default config after every update.
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HBVS4U2NK5X...
--
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
9:10 a.m.
It works for me.....Thanks Nardus.
<IfModule !mod_proxy>
LoadModule proxy_module modules/mod_proxy.so
</IfModule>
<Location /ovirt-engine-grafana>
ProxyPreserveHost On
ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On
ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana
</Location>
147
days inactive
700
days old
8 comments
6 participants
participants (6)
-
Igor Davidoff -
josue.quinteros＠gmail.com -
Martin Perina -
Maton, Brett -
Nardus Geldenhuys -
Patrick Hibbs