Skip to content
Open
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions macros/cockpit/grafana-users-deprecation.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
macro: grafana-users-deprecation
---

<Message type="iam">
**Cockpit Grafana integration with IAM** <br /><br />
From October 1st, 2025, you will be able to log in to Grafana using your Scaleway credentials. Legacy Grafana credentials will be deprecated by January 20th, 2026.
Learn more about the transition in the [dedicated documentation](/cockpit/reference-content/grafana-authentication-with-iam/)
</Message>
19 changes: 0 additions & 19 deletions macros/cockpit/plan-deprecation.mdx

This file was deleted.

3 changes: 3 additions & 0 deletions pages/cockpit/concepts.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ categories:
---
import image from './assets/scaleway-traces-concept.webp'

import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx'

## Agent

Expand Down Expand Up @@ -101,6 +102,8 @@ A Grafana user is any individual who can log in to [Grafana](https://grafana.com
- The `admin` user is not yet available for creation.
</Message>

<GrafanaUsersDeprecation />

## Loki

Loki is the log aggregation system used by [Grafana](https://grafana.com/docs/grafana/latest/introduction/) to store and query your logs.
Expand Down
4 changes: 0 additions & 4 deletions pages/cockpit/faq.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,6 @@ dates:
validation: 2025-06-04
productIcon: CockpitProductIcon
---
import CockpitPlanDeprecation from '@macros/cockpit/plan-deprecation.mdx'


<CockpitPlanDeprecation />

## What is Cockpit?

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ dates:
posted: 2022-10-31
---
import Requirements from '@macros/iam/requirements.mdx'

import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx'

Scaleway provides you with preconfigured dashboards you can access in Grafana, for [Scaleway resources integrated with Cockpit](/cockpit/reference-content/cockpit-limitations/#product-integration-into-cockpit).

Expand All @@ -19,6 +19,7 @@ This page shows you how to access [preconfigured dashboards](/cockpit/concepts/#
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
- [Retrieved your Grafana credentials](/cockpit/how-to/retrieve-grafana-credentials/)

<GrafanaUsersDeprecation />

1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays.
2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You are redirected to the Grafana website.
Expand Down
2 changes: 2 additions & 0 deletions pages/cockpit/how-to/retrieve-grafana-credentials.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ dates:
posted: 2022-10-31
---
import Requirements from '@macros/iam/requirements.mdx'
import GrafanaUsersDeprecation from '@macros/cockpit/grafana-users-deprecation.mdx'


This page shows you how to retrieve your Grafana credentials to access your preconfigured [dashboards](/cockpit/concepts/#preconfigured-dashboards) using the [Scaleway console](https://console.scaleway.com/).
Expand All @@ -16,6 +17,7 @@ This page shows you how to retrieve your Grafana credentials to access your prec
- A Scaleway account logged into the [console](https://console.scaleway.com)
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization

<GrafanaUsersDeprecation />

1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays.
2. Click the **Grafana users** tab.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,94 @@
---
title: Authenticating to Cockpit's Grafana using IAM
description: Learn how to transition from Grafana credentials authentication to Scaleway IAM to access your Cockpit's Grafana
dates:
validation: 2025-08-20
posted: 2025-08-20
---

Starting **October 1st, 2025**, Cockpit will be integrated with **Scaleway IAM**, enabling you to authenticate to your Cockpit's Grafana using your **Scaleway credentials** rather than Grafana credentials.

This page explains how to prepare for the transition.


## Reasons for the change

We are simplifying authentication and improving security by:

- Removing the need to manage Grafana-specific users and passwords.
- Enabling login using your existing **Scaleway credentials**.
- Allowing central IAM-based access management.
- Supporting **Multi-Factor Authentication (MFA)**.

## Transition timeline

| Event | Date |
|------|------|
| IAM authentication becomes available | **October 1st, 2025** |
| Creating new Grafana users disabled | **October 1st, 2025** |
| Legacy Grafana user login deprecation | **January 20th, 2026** |


## What is changing?

### New login method

From **October 1st**, you will be able to log in using your Scaleway credentials via the Scaleway console or saved links.

### New dashboard URLs

To support both login methods during the transition, Grafana dashboards will have **new URLs**:

- **Old URL:**
`https://<project_id>.dashboard.obs.fr-par.scw.cloud`

- **New URL (IAM-authenticated):**
`https://<project_id>.dashboard.cockpit.scaleway.com`
or
`https://<project_id>.dashboard.cockpit.scw.cloud`

Both links will be functional until **January 20th, 2026**, after which only the new IAM-based URLs will remain valid.

## Who can access your Cockpit's Grafana?

Users must:

- Be **members** of your Scaleway Organization
- Have access to the Scaleway Project where the Cockpit is located
- Have been granted either the `ObservabilityReadOnly` or the `ObservabilityFullAccess` IAM permission set

You can manage members and permission sets in the [IAM section of the Scaleway console](https://console.scaleway.com/iam/members).


## How to access your Cockpit's Grafana?

### From the Scaleway console

Access to Grafana using the Scaleway console remains the same as before.

1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays.
2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You will be automatically logged in using your Scaleway account.

### From a saved/shared link

You can also access your Cockpit's Grafana using bookmarked links, alerts, or runbooks.

1. Open the new IAM-compatible URL. The Scaleway login page displays.
2. Log in using your Scaleway credentials. Your Grafana dashboard displays.

## What will happen to existing Grafana users?

Grafana users not linked to Scaleway IAM will be deprecated. Refer to the table below to find out until when you can perform which actions.

| Action | Available until |
|--------|-----------------|
| Log in using Grafana credentials | **January 20th, 2026** |
| Generate passwords for existing Grafana users | **January 20th, 2026** |
| Create new Grafana users | **Disabled after October 1st, 2025** |

## How to prepare for this transition?

If you have users who are not in your Scaleway Organization, we recommend the following:

- **Invite them as Members** to your Organization
- Assign the `ObservabilityReadOnly` or the `ObservabilityFullAccess` permission sets only to the Projects they need to access
Loading