UNCLASSIFIED - NO CUI

Skip to content

Resolve "Bug: Grafana dashboards may not be compatible with Thanos"

General MR

Summary

A bug has been identified impacting Big Bang packages with Grafana dashboards with Prometheus datasources when Thanos is enabled ("datasource": "Prometheus").

Relevant logs/screenshots

Vault Override

monitoring:
  enabled: true

grafana:
  enabled: true
  sso:
    enabled: true
    grafana:
      client_id: platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-grafana
      scopes: "openid Grafana"

istio:
  ingressGateways:
    passthrough-ingressgateway:
      type: "LoadBalancer"
  gateways:
    passthrough:
      ingressGateways: "passthrough-ingressgateway"
      hosts:
      - "vault.dev.bigbang.mil"
      tls:
        mode: "PASSTHROUGH"

kyvernoPolicies:
  enabled: true
  values:
      exclude:
        any:
          # Allows k3d load balancer to bypass policies.
          - resources:
              namespaces:
              - istio-system
              - vault
              names:
              - svclb-*
        policies:
          restrict-host-path-mount-pv:
            parameters:
              allow:
              - /var/lib/rancher/k3s/storage/pvc-*

addons:
  thanos:
    enabled: true
  vault:
    enabled: true

    git:
      branch: "80-bug-grafana-dashboards-may-not-be-compatible-with-thanos"
      tag: null

    values:
      istio:
        enabled: true
        hardened:
          enabled: true

      injector:
        affinity: |
          podAntiAffinity:
            preferredDuringSchedulingIgnoredDuringExecution:
              - weight: 100
                podAffinityTerm:
                  labelSelector:
                    matchLabels:
                      app.kubernetes.io/name: {{ template "vault.name" . }}-agent-injector
                      app.kubernetes.io/instance: "{{ .Release.Name }}"
                      component: webhook
                  topologyKey: kubernetes.io/hostname

BEFORE

Vault-Before

AFTER

Vault-After

Linked Issue

issue

Upgrade Notices

N/A

Edited by Jacob Kershaw

Merge request reports