I've not restored from a backup or changed the grafana databse user password, no idea why this has 'just' stopped working (or when as I don't look at grafana that often). I tried updating the grafana db user password, but still no joy... I grabbed the password from /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf - GRAFANA_DB_PASSWD and then updated the database user: su - postgres psql -d ovirt_engine_history ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from config file'; On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs <hibbsncc1701@gmail.com> wrote:

That can happen if the builtin password for the engine database's grafana user changes, or if you manually restore the grafana database from a backup.

You could try resetting the password by copying it back into the data source config in grafana's UI. (You'll need admin privlieges for grafana to do so.) The password for the engine database's grafana user should be located in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf on the engine host.

-Patrick Hibbs

On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote:

oVirt 4.5.0.8-1.el8

I tried to connect to grafana via the monitoring portal link from the dash and all panels are failing to display any data with varying error messages, but all include 'Origin Not Allowed'

I navigated to Data Sources and ran a test on the PostgreSQL connection (localhost) which threw the same Origin Not Allowed error message.

Any suggestions? _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL7BX...

_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJH4F...

Thanks Nardus, ProxyPreserveHost did the trick, all seems to be working now. On Mon, 13 Jun 2022 at 12:43, Nardus Geldenhuys <nardusg@gmail.com> wrote:

This worked for us:

edit /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf add "ProxyPreserveHost On" should look like this now:

<IfModule !mod_proxy> LoadModule proxy_module modules/mod_proxy.so </IfModule>

<Location /ovirt-engine-grafana> ProxyPreserveHost On ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana </Location>

systemctl restart httpd _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TZFFIN4ESDYTJL...

Hi, this should already be fixed by https://github.com/oVirt/ovirt-dwh/pull/38 included in ovirt-engine-dwh-4.5.3, which should be part of upcoming oVirt 4.5.1 release. Regards, Martin On Tue, Jun 14, 2022 at 1:20 PM Igor Davidoff <igor.davidoff@cloudkleyer.de> wrote:

according to grafana:

https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-with-m...

it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5. As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15: ****** # grafana-server -v Version 7.5.15 (commit: NA, branch: master) ****** the described configuration of "ProxyPreserveHost" for Host header is needed!

Can the dev. team take this configuration to /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf for the next update?

It is not the option to change the default config after every update. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HBVS4U2NK5XWPG...

-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

I meant update the password in grafana's Web UI. You can find it by going to the Monitoring Portal -> Gear Icon on the left hand side -> Data Sources -> oVirt DWH -> PostgreSQL Connection. There you can change the parameters used by grafana to connect to the engine database. (You'll have to hit the reset button to allow updating the password.) *Note: The gear icon will only show up if the logged in user has administrative permissions within grafana. Only the built in oVirt admin user (admin@internal-authz) has this permission by default. But you can delegate those permissions within grafana. - Patrick Hibbs On Mon, 2022-06-13 at 08:34 +0100, Maton, Brett wrote:

  I've not restored from a backup or changed the grafana databse user password, no idea why this has 'just' stopped working (or when as I don't look at grafana that often).

I tried updating the grafana db user password, but still no joy...

I grabbed the password from /etc/ovirt-engine-dwh/ovirt-engine- dwhd.conf.d/10-setup-grafana-database.conf - GRAFANA_DB_PASSWD

and then updated the database user:

su - postgres psql -d ovirt_engine_history ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from config file';

On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs <hibbsncc1701@gmail.com> wrote:

...

That can happen if the builtin password for the engine database's grafana user changes, or if you manually restore the grafana database from a backup.

You could try resetting the password by copying it back into the data source config in grafana's UI. (You'll need admin privlieges for grafana to do so.) The password for the engine database's grafana user should be located in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup- grafana-database.conf on the engine host.

-Patrick Hibbs

On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote:

...

oVirt 4.5.0.8-1.el8 

I tried to connect to grafana via the monitoring portal link from the dash and all panels are failing to display any data with varying error messages, but all include 'Origin Not Allowed'

I navigated to Data Sources and ran a test on the PostgreSQL connection (localhost) which threw the same Origin Not Allowed error message.

Any suggestions? _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL7BX...

...

_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJH4F...