opsi mit externem Grafana

[SirTux]

Hi,

ist es zwangsläufig vorgesehen, daß Grafana ab 4.2 auf dem opsi-Server läuft oder kann man eine bereits bestehende Installation auf einem anderen Server mitverwenden?

Viele Grüße,
Stefan

[fkalweit]

Hallo,

es ist grundsätzlich möglich Grafana auch auf einem anderen System zu betreiben.

Viele Grüße
fkalweit

[SirTux]

Hi,

gibt es schon Doku dazu? Ist es eigentlich gedacht, daß redis auf jedem Depotserver läuft?

Viele Grüße,
Stefan

[SisterOfMercy]

gibt es schon Doku dazu?

https://download.uib.de/opsi4.2/documen ... rerequires

Perhaps here?

[SirTux]

Nein da steht nicht wie man ein bereits existierendes Grafana verwenden kann.

[wolfbardo]

Um eine externe Grafana-Instanz anzubinden müssen die folgenden opsiconfd-Konfigurationen geändert werden:

Code: Alles auswählen

--grafana-internal-url

Die URL über die der opsiconfd administrativ auf die Zentrale Grafana-Instanz zugreifen kann.
Z.B.:

Code: Alles auswählen

http://<api-key>@grafana:3000

Code: Alles auswählen

--grafana-external-url

Die URL auf die Clients weitergeleitet werden, die auf den Grafana-Link auf der opsiconfd-Admin-Seite klicken.

Gruss
Bardo Wolf

[SirTux]

Hi,

funktioniert das auch irgendwie mit einem selbst-signierten Zertifikat? Ich bekomme aktuell ein CERTIFICATE_VERIFY_FAILED.

Viele Grüße,
Stefan

[SirTux]

Das Zertifikat habe ich natürlich im System-Zertifikat-Store auf dem opsi-Server hinterlegt. Ein wget auf Grafana funktioniert entsprechend ohne Fehlermeldung.

Log:

Code: Alles auswählen

[3] [2021-06-09 11:24:37.017] [10.5.150.50    ] HTTPSConnectionPool(host='influxdb-server', port=3000): Max retries exceeded with url: /api/users/lookup?loginOrEmail=opsidashboard (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1091)')))   (session.py:295)
Traceback (most recent call last):
  File "opsiconfd/session.py", line 262, in __call__
  File "starlette/exceptions.py", line 82, in __call__
  File "starlette/exceptions.py", line 71, in __call__
  File "starlette/routing.py", line 566, in __call__
  File "starlette/routing.py", line 227, in handle
  File "starlette/routing.py", line 41, in app
  File "fastapi/routing.py", line 202, in app
  File "fastapi/routing.py", line 150, in run_endpoint_function
  File "starlette/concurrency.py", line 34, in run_in_threadpool
  File "concurrent/futures/thread.py", line 57, in run
  File "opsiconfd/application/admininterface.py", line 211, in open_grafana
  File "requests/sessions.py", line 555, in get
  File "requests/sessions.py", line 542, in request
  File "requests/sessions.py", line 655, in send
  File "requests/adapters.py", line 514, in send
requests.exceptions.SSLError: HTTPSConnectionPool(host='influxdb-server', port=3000): Max retries exceeded with url: /api/users/lookup?loginOrEmail=opsidashboard (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1091)')))

wget:

Code: Alles auswählen

root@opsi:~# wget https://influxdb-server:3000/
--2021-06-09 11:25:03--  https://influxdb-server:3000/
Resolving influxdb-server (influxdb-server)... 10.5.150.11
Connecting to influxdb-server (influxdb-server)|10.5.150.11|:3000... connected.
HTTP request sent, awaiting response... 302 Found
Location: /login [following]
--2021-06-09 11:25:03--  https://influxdb-server:3000/login
Reusing existing connection to influxdb-server:3000.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’

index.html                                                       [ <=>                                                                                                                                         ]  34,07K  --.-KB/s    in 0,001s  

2021-06-09 11:25:03 (63,6 MB/s) - ‘index.html’ saved [34884]

[SirTux]

Hallo,

mit einem offiziellen Zertifikat hat das unter 42 schlußendlich funktioniert.

Seit 4.3 ist das aber leider wieder kaputt. Für den Admin-Client sehe ich folgendes im Log:

Code: Alles auswählen

[3] [2024-03-01 12:58:19.668] [CLIENT-IP] argument of type 'NoneType' is not iterable   (admininterface.py:528)
Traceback (most recent call last):
  File "opsiconfd/application/admininterface.py", line 513, in open_grafana
  File "opsiconfd/application/metrics.py", line 114, in create_grafana_datasource
  File "contextlib.py", line 210, in __aenter__
  File "opsiconfd/grafana.py", line 298, in async_grafana_admin_session
  File "urllib/parse.py", line 671, in unquote
TypeError: argument of type 'NoneType' is not iterable

Für den Grafana-Server folgendes:

Code: Alles auswählen

[3] [2024-03-01 13:07:32.813] [GRAFANA-IP    ] TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode   (session.py:306)
Traceback (most recent call last):
  File "opsiconfd/session.py", line 377, in __call__
  File "opsiconfd/session.py", line 234, in handle_request
  File "opsiconfd/session.py", line 1330, in check_access
  File "opsiconfd/session.py", line 1143, in authenticate
  File "redis/asyncio/client.py", line 606, in execute_command
  File "redis/asyncio/retry.py", line 59, in call_with_retry
  File "redis/asyncio/client.py", line 580, in _send_command_parse_response
  File "redis/asyncio/client.py", line 627, in parse_response
  File "redis/asyncio/connection.py", line 538, in read_response
redis.exceptions.ResponseError: TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode
[3] [2024-03-01 13:07:32.815] [GRAFANA-IP    ] TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode   (session.py:306)
Traceback (most recent call last):
  File "opsiconfd/session.py", line 377, in __call__
  File "opsiconfd/session.py", line 234, in handle_request
  File "opsiconfd/session.py", line 1330, in check_access
  File "opsiconfd/session.py", line 1143, in authenticate
  File "redis/asyncio/client.py", line 606, in execute_command
  File "redis/asyncio/retry.py", line 59, in call_with_retry
  File "redis/asyncio/client.py", line 580, in _send_command_parse_response
  File "redis/asyncio/client.py", line 627, in parse_response
  File "redis/asyncio/connection.py", line 538, in read_response
redis.exceptions.ResponseError: TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode
[3] [2024-03-01 13:07:32.816] [GRAFANA-IP    ] TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode   (session.py:306)
Traceback (most recent call last):
  File "opsiconfd/session.py", line 377, in __call__
  File "opsiconfd/session.py", line 234, in handle_request
  File "opsiconfd/session.py", line 1330, in check_access
  File "opsiconfd/session.py", line 1143, in authenticate
  File "redis/asyncio/client.py", line 606, in execute_command
  File "redis/asyncio/retry.py", line 59, in call_with_retry
  File "redis/asyncio/client.py", line 580, in _send_command_parse_response
  File "redis/asyncio/client.py", line 627, in parse_response
  File "redis/asyncio/connection.py", line 538, in read_response
redis.exceptions.ResponseError: TSDB: Error at upsert, update is not supported when DUPLICATE_POLICY is set to BLOCK mode
[4] [2024-03-01 13:07:33.014] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)
[4] [2024-03-01 13:07:33.044] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)
[4] [2024-03-01 13:07:33.080] [GRAFANA-IP    ] Blocking client 'GRAFANA-IP' for 2.00 minutes   (session.py:1291)
[4] [2024-03-01 13:07:33.130] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)
[4] [2024-03-01 13:07:33.130] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)
[4] [2024-03-01 13:07:33.133] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)
[4] [2024-03-01 13:07:33.282] [GRAFANA-IP    ] Opsi service authentication error: No password specified   (session.py:283)

Viele Grüße,
Stefan

[fkalweit]

Hallo,

ich versuche das mal bei uns in einer Testumgebung nachzustellen.
Dann finden wir zusammen bestimmt eine Lösung.
Evt brauche ich dann noch weitere Informationen.


Viele Grüße
Fabian