influxdata / chronograf

Open source monitoring and visualization UI for the TICK stack
https://www.influxdata.com/time-series-platform/chronograf/
Other
1.51k stars 258 forks source link

Cannot manage to see users when connecting latest influxdb to Chronograf #5964

Closed S0UL4 closed 2 years ago

S0UL4 commented 2 years ago

Hello Guys,

I'm running both images and linked them with docker-compose.. however when i try to manage users through InfluxDB Admin panel in chronograf i always get this ..

Screenshot from 2022-06-27 00-54-07

Any idea please?

sranka commented 2 years ago

Hi @S0UL4 , use InfluxDB 2.x administration UI directly, chronograf InfluxDB administration requires InfluxDB 1.x

S0UL4 commented 2 years ago

Hi @sranka , Thanks for your reply.

I used Chronograf because i'm integrating influxDB2 in a platform and i want each user to connect to InfluxDB using oAuth2 ..

sranka commented 2 years ago

You cannot administer InfluxDB v2 through chronograf, there are different APIs and domain objects in v2. You can restrict chronograf users to see the administration tab, only chronograf admin role can see the administration UI.

S0UL4 commented 2 years ago

So there is no way to let users authentificate to InfluxDB2 with oAuth2 via my developed platform? because what i want is that each user have access to his own InfluxDB2 account without re-entering [email,pass] again.. i thought Chronograf would help me in that as it integrates oAuth2.. what if i switch to influxDB1.x ?

sranka commented 2 years ago

Chronograf OAuth2 is used to authenticate against chronograf, which then uses a preconfigured InfluxDB token (or username/password in case of InfluxDB v1) independently on the OAuth2 user. Chronograf is targeted to InfluxDB v1 and InfluxDB Enterprise, though it still works against InfluxDB v2. I guess that switching to v1 makes no real difference in your case. Some chronograf functionalities are disabled (InfluxDB administration) or require extra configuration in v2 (v2 buckets must be mapped to v1 databases+retention policies to use InfluxQL).

S0UL4 commented 2 years ago

Thank you so much..

So even by using oAuth2 in chronograf and using a preconfigured InfluxDB token i think that users must exists already in the list of InfluxDB users right? Screenshot from 2022-06-27 12-30-47

sranka commented 2 years ago

You can assign a default role to every new user. You can change it from member to viewer so that the new users can see dashboards and explore InfluxDB data. See https://docs.influxdata.com/chronograf/v1.9/administration/managing-chronograf-users/ .

S0UL4 commented 2 years ago

@sranka can i assign the role to every new user through an env variable? because i'm using Docker-compose here..

sranka commented 2 years ago

You can't, you can however mount a pre-configured chronograf database with a BOLT_PATH env variable. Run chronograf --help to know more.