How to integrate auth? about linkerd-viz HOT 4 CLOSED

@wyaeld that seems like a great set of goals. Please post some notes as you figure out the productionization story; I'm sure others would be interested too!

from linkerd-viz.

Hi @wyaeld. Good question. I don't have a GKE config handy.

I'd recommend modifying the Grafana config in this repo and rolling your own Docker image.

grafana.ini is written at startup time here:
https://github.com/linkerd/linkerd-viz/blob/master/linkerd-viz#L19

Building your own linkerd-viz Docker image:
https://github.com/linkerd/linkerd-viz#build-docker-image

Let me know if you have additional questions, cheers.

from linkerd-viz.

I have it the google auth now. Some feedback.

Using the native Grafana capability to use ENV vars seems to work nicer than updating an image with a grafana.ini

Once you add in some auth, the api calls being used to bootstrap the prometheus datasource fail, which took me a while to work out and troubleshoot.

Anyway, a huge thanks. This project works great as a starter. The only thing really missing is some more elaboration on how you'd do a production-grade setup. However its probable that anyone who understands enough about k8s and prometheus to use this stuff knows how to make the required changes.

Where I'm trying to go is:

• l5d as a daemonset on all nodes
• prometheus running with persistent volume claim, reachable as service, but not externally
• generic grafana with a persistent datastore
• l5d-viz metric scraping and dashboards on the grafana
• k8s metric scraping and dashboards on the same grafana

from linkerd-viz.

Ultimately we moved away from Linkerd and towards the full suite of Stackdriver services for tracing etc.

from linkerd-viz.