IDR/deployment

Make grafana views more accessible

Opened this issue · 0 comments

#37 (comment)

At the moment we have pretty strict rules on what can be accessed via idr-proxy:

  • Full public access:
    • OMERO.web read-only
  • Limited public access
    • Jupyterhub
    • OMERO.server read-only
  • Internal users only:
    • SSH

Ideally the dashboards would be completely publicly viewable. Grafana allows "read-only" dashboards but this can not prevent querying of the backend prometheus data grafana/grafana#1826 (comment)

Using http-auth to make it easier for internal users to view without setting up a SSH tunnel is an option but means another authentication system to manage.