according to grafana:

it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5.
As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15:
# grafana-server -v
Version 7.5.15 (commit: NA, branch: master)
the described configuration of "ProxyPreserveHost" for Host header is needed!

Can the dev. team take this configuration to  
for the next update?

It is not the option to change the default config after every update.
Users mailing list --
To unsubscribe send an email to
Privacy Statement:
oVirt Code of Conduct:
List Archives:

Reply via email to