diff --git a/macros/cockpit/grafana-users-deprecation.mdx b/macros/cockpit/grafana-users-deprecation.mdx new file mode 100644 index 0000000000..d6124985f7 --- /dev/null +++ b/macros/cockpit/grafana-users-deprecation.mdx @@ -0,0 +1,9 @@ +--- +macro: grafana-users-deprecation +--- + + + **Cockpit Grafana integration with IAM**

+ From October 15th, 2025, you will be able to log in to Grafana using your Scaleway credentials. Legacy Grafana user credentials will be deprecated by January 20th, 2026. + Learn more about the transition in the [dedicated documentation](/cockpit/reference-content/grafana-authentication-with-iam/) + \ No newline at end of file diff --git a/macros/cockpit/plan-deprecation.mdx b/macros/cockpit/plan-deprecation.mdx deleted file mode 100644 index ad4809a827..0000000000 --- a/macros/cockpit/plan-deprecation.mdx +++ /dev/null @@ -1,19 +0,0 @@ ---- -macro: cockpit-plan-deprecation ---- - - - - **Pricing update for Cockpit custom retention**

- - On January 1st, 2025, Cockpit pricing plans were deprecated and replaced by the custom [retention](/cockpit/concepts/#retention) feature, available for free during beta. - On May 1st, 2025, this feature reaches general availability and **becomes billable**.

- - **Logs and traces**: free retention for 7 days, then charged €0.002/GB/day - - **Metrics**: free retention for 31 days, then charged €0.0002/10 million samples/day - - Ingestion of custom data remains billable at [the current pricing](/cockpit/faq/#how-am-i-billed-for-using-cockpit-with-custom-data). - - Refer to the [dedicated documentation](/cockpit/how-to/change-data-retention/) to adjust retention settings. - diff --git a/pages/cockpit/concepts.mdx b/pages/cockpit/concepts.mdx index ec16571b41..f3c62ec675 100644 --- a/pages/cockpit/concepts.mdx +++ b/pages/cockpit/concepts.mdx @@ -9,6 +9,7 @@ categories: --- import image from './assets/scaleway-traces-concept.webp' +import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx' ## Agent @@ -101,6 +102,8 @@ A Grafana user is any individual who can log in to [Grafana](https://grafana.com - The `admin` user is not yet available for creation. + + ## Loki Loki is the log aggregation system used by [Grafana](https://grafana.com/docs/grafana/latest/introduction/) to store and query your logs. diff --git a/pages/cockpit/faq.mdx b/pages/cockpit/faq.mdx index 36f6411890..40d746161b 100644 --- a/pages/cockpit/faq.mdx +++ b/pages/cockpit/faq.mdx @@ -5,10 +5,6 @@ dates: validation: 2025-06-04 productIcon: CockpitProductIcon --- -import CockpitPlanDeprecation from '@macros/cockpit/plan-deprecation.mdx' - - - ## What is Cockpit? diff --git a/pages/cockpit/how-to/access-grafana-and-managed-dashboards.mdx b/pages/cockpit/how-to/access-grafana-and-managed-dashboards.mdx index 8019f105e4..04a5ad676a 100644 --- a/pages/cockpit/how-to/access-grafana-and-managed-dashboards.mdx +++ b/pages/cockpit/how-to/access-grafana-and-managed-dashboards.mdx @@ -7,7 +7,7 @@ dates: posted: 2022-10-31 --- import Requirements from '@macros/iam/requirements.mdx' - +import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx' Scaleway provides you with preconfigured dashboards you can access in Grafana, for [Scaleway resources integrated with Cockpit](/cockpit/reference-content/cockpit-limitations/#product-integration-into-cockpit). @@ -19,6 +19,7 @@ This page shows you how to access [preconfigured dashboards](/cockpit/concepts/# - [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization - [Retrieved your Grafana credentials](/cockpit/how-to/retrieve-grafana-credentials/) + 1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays. 2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You are redirected to the Grafana website. diff --git a/pages/cockpit/how-to/retrieve-grafana-credentials.mdx b/pages/cockpit/how-to/retrieve-grafana-credentials.mdx index 97568d346f..76b5230a6b 100644 --- a/pages/cockpit/how-to/retrieve-grafana-credentials.mdx +++ b/pages/cockpit/how-to/retrieve-grafana-credentials.mdx @@ -7,6 +7,7 @@ dates: posted: 2022-10-31 --- import Requirements from '@macros/iam/requirements.mdx' +import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx' This page shows you how to retrieve your Grafana credentials to access your preconfigured [dashboards](/cockpit/concepts/#preconfigured-dashboards) using the [Scaleway console](https://console.scaleway.com/). @@ -16,6 +17,7 @@ This page shows you how to retrieve your Grafana credentials to access your prec - A Scaleway account logged into the [console](https://console.scaleway.com) - [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization + 1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays. 2. Click the **Grafana users** tab. diff --git a/pages/cockpit/reference-content/grafana-authentication-with-iam.mdx b/pages/cockpit/reference-content/grafana-authentication-with-iam.mdx new file mode 100644 index 0000000000..90f4ab190d --- /dev/null +++ b/pages/cockpit/reference-content/grafana-authentication-with-iam.mdx @@ -0,0 +1,96 @@ +--- +title: Authenticating to Cockpit's Grafana using IAM +description: Learn how to transition from Grafana credentials authentication to Scaleway IAM to access your Cockpit's Grafana +dates: + validation: 2025-08-26 + posted: 2025-08-26 +--- + +Starting **October 15th, 2025**, Cockpit will be integrated with **Scaleway IAM**, allowing you to authenticate to your Cockpit's Grafana using your **Scaleway credentials** instead of Grafana credentials. + +This page explains how to prepare for the transition. + + +## Reasons for the change + +We are simplifying authentication and improving security by: + +- Removing the need to manage Grafana-specific users and passwords. +- Enabling login using your existing **Scaleway credentials**. +- Allowing central IAM-based access management. +- Supporting **Multi-Factor Authentication (MFA)**. + +## Transition timeline + +| Event | Date | +|------|------| +| IAM authentication becomes available | **October 15th, 2025** | +| Creating new Grafana users disabled | **October 15th, 2025** | +| Legacy Grafana user login deprecation | **January 20th, 2026** | + +Grafana users not linked to Scaleway IAM will be deprecated. Refer to the table below to find out until when you can perform which actions. + +| Action | Available until | +|--------|-----------------| +| Logging in using Grafana user credentials | **January 20th, 2026** | +| Generate passwords for existing Grafana users | **January 20th, 2026** | +| Create new Grafana users | **Disabled after October 15th, 2025** | + +## What is changing? + +### New login method + +From **October 15th**, you will be able to log in using your Scaleway credentials via the Scaleway console or saved links. + +### New dashboard URLs + +To support both login methods during the transition, Grafana dashboards will have a **new URL**: + +- **Old URL:** + `https://.dashboard.obs.fr-par.scw.cloud` + +- **New URL (IAM-authenticated):** + `https://.dashboard.cockpit.scaleway.com` + + +Both links will be functional until **January 20th, 2026**, after which only the new IAM-based URLs will remain valid. + +## Who can access your Cockpit's Grafana? + +Users must: + +- Be **Members** of your Scaleway Organization +- Have access to the Scaleway Project where the Cockpit is located +- Have been granted either the `ObservabilityReadOnly`, the `AllProductsFullAccess`, or the `ObservabilityFullAccess` IAM permission set + +You can manage Members and permission sets in the [IAM section of the Scaleway console](https://console.scaleway.com/iam/members). + + + Make sure that you review and manage permissions sets granted to current Members of your Organization, to either revoke or grant access accordingly. + + + +## How to access your Cockpit's Grafana + +### From the Scaleway console + +Access to Grafana using the Scaleway console remains the same as before. + +1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays. +2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You will be automatically logged in using your Scaleway account. + +### From a saved/shared link + +You can also access your Cockpit's Grafana using bookmarked links if you cannot access the Scaleway console. + +1. Open the new IAM-compatible URL. The Scaleway login page displays. +2. Log in using your Scaleway credentials. Your Grafana dashboard displays. + +## How to prepare for this transition + +1. Make sure that you review and manage permissions sets granted to current Members of your Organization, to either revoke or grant access accordingly. + + If you have Grafana users who are not in your Scaleway Organization: + +2. [Invite them as Members](/iam/how-to/manage-members/#how-to-create-a-member) to your Organization. +3. Assign the `ObservabilityReadOnly` or the `ObservabilityFullAccess` permission sets only to the Projects they need to access. diff --git a/pages/cockpit/troubleshooting/resetting-grafana-password-via-the-api.mdx b/pages/cockpit/troubleshooting/resetting-grafana-password-via-the-api.mdx index 20fd6e2d7c..37f922caff 100644 --- a/pages/cockpit/troubleshooting/resetting-grafana-password-via-the-api.mdx +++ b/pages/cockpit/troubleshooting/resetting-grafana-password-via-the-api.mdx @@ -7,6 +7,7 @@ dates: posted: 2023-04-03 --- import Requirements from '@macros/iam/requirements.mdx' +import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx' This page shows you how to reset your Grafana user's password through the Scaleway console.