ab2708e63b
Adds a read-only datasource pointing at archive-db using the grafana_reader role (provisioned by Flyway V68). The password is interpolated from the GRAFANA_DB_PASSWORD env var passed to obs-grafana, and the connection is locked to editable: false so the credential cannot be inspected via the UI. sslmode=disable is intentional: traffic stays inside archiv-net. Refs #651. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
55 lines
1.3 KiB
YAML
55 lines
1.3 KiB
YAML
apiVersion: 1
|
|
|
|
datasources:
|
|
- name: Prometheus
|
|
type: prometheus
|
|
uid: prometheus
|
|
url: http://obs-prometheus:9090
|
|
isDefault: true
|
|
editable: false
|
|
|
|
- name: Loki
|
|
type: loki
|
|
uid: loki
|
|
url: http://obs-loki:3100
|
|
editable: false
|
|
jsonData:
|
|
derivedFields:
|
|
- name: TraceID
|
|
matcherRegex: '"traceId":"(\w+)"'
|
|
url: "${__value.raw}"
|
|
datasourceUid: tempo
|
|
|
|
- name: Tempo
|
|
type: tempo
|
|
uid: tempo
|
|
url: http://obs-tempo:3200
|
|
editable: false
|
|
jsonData:
|
|
tracesToLogsV2:
|
|
datasourceUid: loki
|
|
spanStartTimeShift: "-1m"
|
|
spanEndTimeShift: "1m"
|
|
filterByTraceID: true
|
|
filterBySpanID: false
|
|
serviceMap:
|
|
datasourceUid: prometheus
|
|
nodeGraph:
|
|
enabled: true
|
|
|
|
# Read-only PostgreSQL datasource for the PO Overview dashboard (issue #651).
|
|
# Uses the grafana_reader role provisioned by Flyway V68. Traffic stays inside
|
|
# archiv-net, so sslmode=disable is the deliberate, accepted setting.
|
|
- name: PostgreSQL
|
|
type: postgres
|
|
uid: postgres
|
|
url: archive-db:5432
|
|
user: grafana_reader
|
|
editable: false
|
|
secureJsonData:
|
|
password: ${GRAFANA_DB_PASSWORD}
|
|
jsonData:
|
|
database: ${POSTGRES_DB}
|
|
sslmode: disable
|
|
postgresVersion: 1600
|