[ovirt-users] Re: Grafana - Origin Not Allowed
It works for me.Thanks Nardus. LoadModule proxy_module modules/mod_proxy.so ProxyPreserveHost On ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/6TFJDGCBCKJ2JK2VNP34HMKW3X345HH3/
[ovirt-users] Re: Grafana - Origin Not Allowed
Hi, this should already be fixed by https://github.com/oVirt/ovirt-dwh/pull/38 included in ovirt-engine-dwh-4.5.3, which should be part of upcoming oVirt 4.5.1 release. Regards, Martin On Tue, Jun 14, 2022 at 1:20 PM Igor Davidoff wrote: > according to grafana: > > > https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-with-moderate-severity-security-fixes/ > > it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5. > As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15: > ** > # grafana-server -v > Version 7.5.15 (commit: NA, branch: master) > ** > the described configuration of "ProxyPreserveHost" for Host header is > needed! > > Can the dev. team take this configuration to > /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf > for the next update? > > It is not the option to change the default config after every update. > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HBVS4U2NK5XWPGCNOHCZLMUL544ZZI36/ > -- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/XY7XAPUQJ2ATPZBHLYA2O3B456V4JVFG/
[ovirt-users] Re: Grafana - Origin Not Allowed
according to grafana: https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-with-moderate-severity-security-fixes/ it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5. As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15: ** # grafana-server -v Version 7.5.15 (commit: NA, branch: master) ** the described configuration of "ProxyPreserveHost" for Host header is needed! Can the dev. team take this configuration to /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf for the next update? It is not the option to change the default config after every update. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HBVS4U2NK5XWPGCNOHCZLMUL544ZZI36/
[ovirt-users] Re: Grafana - Origin Not Allowed
I meant update the password in grafana's Web UI. You can find it by going to the Monitoring Portal -> Gear Icon on the left hand side -> Data Sources -> oVirt DWH -> PostgreSQL Connection. There you can change the parameters used by grafana to connect to the engine database. (You'll have to hit the reset button to allow updating the password.) *Note: The gear icon will only show up if the logged in user has administrative permissions within grafana. Only the built in oVirt admin user (admin@internal-authz) has this permission by default. But you can delegate those permissions within grafana. - Patrick Hibbs On Mon, 2022-06-13 at 08:34 +0100, Maton, Brett wrote: > I've not restored from a backup or changed the grafana databse user > password, no idea why this has 'just' stopped working (or when as I > don't look at grafana that often). > > I tried updating the grafana db user password, but still no joy... > > I grabbed the password from /etc/ovirt-engine-dwh/ovirt-engine- > dwhd.conf.d/10-setup-grafana-database.conf - GRAFANA_DB_PASSWD > > and then updated the database user: > > su - postgres > psql -d ovirt_engine_history > ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from > config file'; > > > On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs > wrote: > > That can happen if the builtin password for the engine database's > > grafana user changes, or if you manually restore the grafana > > database from a backup. > > > > You could try resetting the password by copying it back into the > > data source config in grafana's UI. (You'll need admin privlieges > > for grafana to do so.) > > The password for the engine database's grafana user should be > > located in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup- > > grafana-database.conf on the engine host. > > > > -Patrick Hibbs > > > > On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote: > > > oVirt 4.5.0.8-1.el8 > > > > > > I tried to connect to grafana via the monitoring portal link from > > > the dash and all panels are failing to display any data with > > > varying error messages, but all include 'Origin Not Allowed' > > > > > > I navigated to Data Sources and ran a test on the PostgreSQL > > > connection (localhost) which threw the same Origin Not Allowed > > > error message. > > > > > > Any suggestions? > > > ___ > > > Users mailing list -- users@ovirt.org > > > To unsubscribe send an email to users-le...@ovirt.org > > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > > oVirt Code of Conduct: > > > https://www.ovirt.org/community/about/community-guidelines/ > > > List Archives: > > > > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL7BXDDBOFIS22JMS5ONUYU/ > > > > > > ___ > > Users mailing list -- users@ovirt.org > > To unsubscribe send an email to users-le...@ovirt.org > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJH4FZW2Y2UVDBZD3KBJN37/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZMWOQQHJAVCM5NLTDXXIJL7Y3U65HNTV/
[ovirt-users] Re: Grafana - Origin Not Allowed
Thanks Nardus, ProxyPreserveHost did the trick, all seems to be working now. On Mon, 13 Jun 2022 at 12:43, Nardus Geldenhuys wrote: > This worked for us: > > edit /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf > add "ProxyPreserveHost On" > should look like this now: > > > LoadModule proxy_module modules/mod_proxy.so > > > > ProxyPreserveHost On > ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On > ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana > > > systemctl restart httpd > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/TZFFIN4ESDYTJLNHYW7WDXYKECEZ57K6/ > ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VOIFYLPZPJ77TWAJAWTLH3ZH57WASSCI/
[ovirt-users] Re: Grafana - Origin Not Allowed
This worked for us: edit /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf add "ProxyPreserveHost On" should look like this now: LoadModule proxy_module modules/mod_proxy.so ProxyPreserveHost On ProxyPass http://127.0.0.1:3000 retry=0 disablereuse=On ProxyPassReverse http://127.0.0.1:3000/ovirt-engine-grafana systemctl restart httpd ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TZFFIN4ESDYTJLNHYW7WDXYKECEZ57K6/
[ovirt-users] Re: Grafana - Origin Not Allowed
I've not restored from a backup or changed the grafana databse user password, no idea why this has 'just' stopped working (or when as I don't look at grafana that often). I tried updating the grafana db user password, but still no joy... I grabbed the password from /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf - GRAFANA_DB_PASSWD and then updated the database user: su - postgres psql -d ovirt_engine_history ALTER ROLE ovirt_engine_history_grafana WITH PASSWORD 'password from config file'; On Fri, 10 Jun 2022 at 17:32, Patrick Hibbs wrote: > That can happen if the builtin password for the engine database's grafana > user changes, or if you manually restore the grafana database from a backup. > > You could try resetting the password by copying it back into the data > source config in grafana's UI. (You'll need admin privlieges for grafana to > do so.) > The password for the engine database's grafana user should be located in > /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana-database.conf > on the engine host. > > -Patrick Hibbs > > On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote: > > oVirt 4.5.0.8-1.el8 > > I tried to connect to grafana via the monitoring portal link from the dash > and all panels are failing to display any data with varying error messages, > but all include 'Origin Not Allowed' > > I navigated to Data Sources and ran a test on the PostgreSQL connection > (localhost) which threw the same Origin Not Allowed error message. > > Any suggestions? > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL7BXDDBOFIS22JMS5ONUYU/ > > > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJH4FZW2Y2UVDBZD3KBJN37/ > ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZACPIB4DC53BH26WDBDYVYNWXHH3N5U2/
[ovirt-users] Re: Grafana - Origin Not Allowed
That can happen if the builtin password for the engine database's grafana user changes, or if you manually restore the grafana database from a backup. You could try resetting the password by copying it back into the data source config in grafana's UI. (You'll need admin privlieges for grafana to do so.) The password for the engine database's grafana user should be located in /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-grafana- database.conf on the engine host. -Patrick Hibbs On Thu, 2022-06-09 at 09:32 +0100, Maton, Brett wrote: > oVirt 4.5.0.8-1.el8 > > I tried to connect to grafana via the monitoring portal link from the > dash and all panels are failing to display any data with varying > error messages, but all include 'Origin Not Allowed' > > I navigated to Data Sources and ran a test on the PostgreSQL > connection (localhost) which threw the same Origin Not Allowed error > message. > > Any suggestions? > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5I3LPPDKLL7BXDDBOFIS22JMS5ONUYU/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/KDPMJGJ22DJH4FZW2Y2UVDBZD3KBJN37/
