In order to configure grafana for Rook we have to configure two components Prometheus and Grafana. For Prometheus the user has to follow the instructions step by step. In this setup Grafana consumes ceph metrics provided by Prometheus to show nice dashboards to the user.
Before going on with the rest of this tutorial please make sure:
- You have a healthy ceph Rook cluster
- Prometheus is configured and running
- dashboard is configured with https (ssl: true)
First, let's clone this repository to get all the configuration files we will ned for the setup:
git clone https://github.com/rkachach/rook-grafana.git
Before going on with Grafana configuration please make sure Prometheus is up & running correctly in your Rook cluster. To get the URL where Prometheus is litening user can use (save its value as we will need it later):
echo "http://$(kubectl -n rook-ceph -o jsonpath={.status.hostIP} get pod prometheus-rook-prometheus-0):30900"
In this guide we will be configuring Grafana to use https, therefore the first step is to generate the certificate the will be used by Grafana (just keep empty all the fields that openssl asks to introduce by hitting enter).
openssl req -newkey rsa:4096 -new -nodes -keyout grafana.key -x509 -days 365 -out grafana.crt
kubectl -n rook-ceph create secret tls grafana-tls --key grafana.key --cert grafana.crt
At the end of this process openssl should generate two files: grafana.crt and grafana.key
Store the generated files as k8s secrets:
kubectl -n rook-ceph create secret tls grafana-tls --key grafana.key --cert grafana.crt
Before deploying grafana we have to set prometheus-service-ip:port in the configuration file grafana-datasource-config.yaml to Promtheus endpoint (got previously). At this point we should be ready to deploy Grafana by using the following command:
kubectl -n rook-ceph apply -f grafana-ini.yaml -f grafana-datasource-config.yaml -f deployment.yaml
The first file grafana-ini.yaml will be mapped to /etc/grafana/grafana.ini meanwhile the file grafana-datasource-config.yaml is mapped to /etc/grafana/provisioning/datasources/prometheus.yaml.
kubectl -n rook-ceph apply -f service.yaml
This command will create the service grafana as a NodePort listening on the port 32000. In case of minikube users grafana service url can be obtained by running:
minikube service grafana -n rook-ceph --url
By default Grafana uses admin:<random_password> as credentials. For development environments it's handly to just set the password to admin (i.e). Following command will set Grafana's password to 'admin':
kubectl -n rook-ceph exec -it $(kubectl -n rook-ceph get pods -l "app=grafana" -o jsonpath="{.items[0].metadata.name}") grafana-cli admin reset-admin-password admin