Loki/Grafana/Promtail: document multitenant configuration

[previ]

It should be possible to configure Loki/Grafana/Promtail in order to achieve multitenancy:

• Separate teams administering applications deployed in separate kubernetes namespaces should be able to access only the log data generated by pods deployed in the namespaces

Current situation In the loki/promtail docs a multitenant configuration is described: (hereand here) but this solution does not fully satisfy the use case:

• install promtail as a sidecar container in not always possible or acceptable
• In grafana, it is not possible to save log queries as dashboards
• it is not clear how to publish the log data to the tenant (is it necessary to use a reverse proxy to add the X-Scope-OrgID header? Also, how to expose only the tenant data kept in loki to a specific Organization?

[hugohaggmark]

Thanks again for contributing @previ! @davkal is this something we have on the roadmap to do/clarify?

[GrafanaWriter]

This issue hasn't had activity in more than six months. In another week, I will close it.

If you comment or otherwise update it, we'll reset the clock.

[Morriz]

any update here? can you publish a link to up-to-date docs?

[matyax]

@grafana/loki-squad Could you please take a look at this one? Thanks!

[JuanPabloSGU]

This would be useful documentation... any updates?

[EmptyLungs]

Any updates? I'm also struggling to set up Loki in multi-tenant mode.