search

DoD-Platform-One / loki

https://repo1.dso.mil/big-bang/product/packages/loki
Apache License 2.0
1 stars 0 forks source link

Add Optional VirtualService to expose Loki to external grafana #5

Open p1-repo-sync-bot[bot] opened 9 months ago

p1-repo-sync-bot[bot] commented 9 months ago

In a Hub and Spoke architecture with an external Grafana querying Loki, a virtual service needs to be added to expose the query pods.

We need to understand how auth is performed into loki so we can give the hub cluster the credentials for getting to the loki query pods. The upstream scalable chart has an nginx proxy in front of loki that provides basic auth (username/password) per https://grafana.com/docs/loki/latest/operations/authentication/

https://github.com/grafana/helm-charts/blob/main/charts/loki-simple-scalable/values.yaml#L427

Can we do something with Istio instead and enforce a token with the request?

p1-repo-sync-bot[bot] commented 8 months ago

bb8-bot commented:

@runyontr this issue has been inactive for 30 days and is being labelled as ~stale. If this issue is still required please take action by removing the ~stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as ~delete-me. If no action is taken this issue will be auto closed in 60 days.