-
Notifications
You must be signed in to change notification settings - Fork 249
cockpit(add): add banner and new page about Grafana credentials deprecation #5429
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
nerda-codes
wants to merge
4
commits into
main
Choose a base branch
from
MTA-6322
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from 2 commits
Commits
Show all changes
4 commits
Select commit
Hold shift + click to select a range
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
--- | ||
macro: grafana-users-deprecation | ||
--- | ||
|
||
<Message type="iam"> | ||
**Cockpit Grafana integration with IAM** <br /><br /> | ||
From October 1st, 2025, you will be able to log in to Grafana using your Scaleway credentials. Legacy Grafana credentials will be deprecated by January 20th, 2026. | ||
Learn more about the transition in the [dedicated documentation](/cockpit/reference-content/grafana-authentication-with-iam/) | ||
</Message> |
This file was deleted.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
94 changes: 94 additions & 0 deletions
94
pages/cockpit/reference-content/grafana-authentication-with-iam.mdx
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,94 @@ | ||
--- | ||
title: Authenticating to Cockpit's Grafana using IAM | ||
description: Learn how to transition from Grafana credentials authentication to Scaleway IAM to access your Cockpit's Grafana | ||
dates: | ||
validation: 2025-08-20 | ||
posted: 2025-08-20 | ||
--- | ||
|
||
Starting **October 1st, 2025**, Cockpit will be integrated with **Scaleway IAM**, enabling you to authenticate to your Cockpit's Grafana using your **Scaleway credentials** rather than Grafana credentials. | ||
|
||
This page explains how to prepare for the transition. | ||
|
||
|
||
## Reasons for the change | ||
|
||
We are simplifying authentication and improving security by: | ||
|
||
- Removing the need to manage Grafana-specific users and passwords. | ||
- Enabling login using your existing **Scaleway credentials**. | ||
- Allowing central IAM-based access management. | ||
- Supporting **Multi-Factor Authentication (MFA)**. | ||
|
||
## Transition timeline | ||
|
||
| Event | Date | | ||
|------|------| | ||
| IAM authentication becomes available | **October 1st, 2025** | | ||
| Creating new Grafana users disabled | **October 1st, 2025** | | ||
| Legacy Grafana user login deprecation | **January 20th, 2026** | | ||
|
||
|
||
## What is changing? | ||
|
||
### New login method | ||
|
||
From **October 1st**, you will be able to log in using your Scaleway credentials via the Scaleway console or saved links. | ||
|
||
### New dashboard URLs | ||
|
||
To support both login methods during the transition, Grafana dashboards will have **new URLs**: | ||
|
||
- **Old URL:** | ||
`https://<project_id>.dashboard.obs.fr-par.scw.cloud` | ||
|
||
- **New URL (IAM-authenticated):** | ||
`https://<project_id>.dashboard.cockpit.scaleway.com` | ||
or | ||
`https://<project_id>.dashboard.cockpit.scw.cloud` | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
Both links will be functional until **January 20th, 2026**, after which only the new IAM-based URLs will remain valid. | ||
|
||
## Who can access your Cockpit's Grafana? | ||
|
||
Users must: | ||
|
||
- Be **members** of your Scaleway Organization | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
- Have access to the Scaleway Project where the Cockpit is located | ||
- Have been granted either the `ObservabilityReadOnly` or the `ObservabilityFullAccess` IAM permission set | ||
|
||
You can manage members and permission sets in the [IAM section of the Scaleway console](https://console.scaleway.com/iam/members). | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
|
||
## How to access your Cockpit's Grafana? | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
### From the Scaleway console | ||
|
||
Access to Grafana using the Scaleway console remains the same as before. | ||
|
||
1. Click **Cockpit** in the **Monitoring** section of the [console](https://console.scaleway.com/) side menu. The **Cockpit** overview page displays. | ||
2. Click **Open dashboards** to open your preconfigured dashboards in Grafana. You will be automatically logged in using your Scaleway account. | ||
|
||
### From a saved/shared link | ||
|
||
You can also access your Cockpit's Grafana using bookmarked links, alerts, or runbooks. | ||
|
||
1. Open the new IAM-compatible URL. The Scaleway login page displays. | ||
2. Log in using your Scaleway credentials. Your Grafana dashboard displays. | ||
|
||
## What will happen to existing Grafana users? | ||
|
||
Grafana users not linked to Scaleway IAM will be deprecated. Refer to the table below to find out until when you can perform which actions. | ||
|
||
| Action | Available until | | ||
|--------|-----------------| | ||
| Log in using Grafana credentials | **January 20th, 2026** | | ||
| Generate passwords for existing Grafana users | **January 20th, 2026** | | ||
| Create new Grafana users | **Disabled after October 1st, 2025** | | ||
|
||
## How to prepare for this transition? | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
If you have users who are not in your Scaleway Organization, we recommend the following: | ||
|
||
- **Invite them as Members** to your Organization | ||
nerda-codes marked this conversation as resolved.
Show resolved
Hide resolved
|
||
- Assign the `ObservabilityReadOnly` or the `ObservabilityFullAccess` permission sets only to the Projects they need to access |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.