Bug 1883476 - [downstream] Configure role-mapping on SSO to grafana
Summary: [downstream] Configure role-mapping on SSO to grafana
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine-dwh
Version: 4.4.1
Hardware: Unspecified
OS: Unspecified
medium
high
Target Milestone: ---
: ---
Assignee: Yedidyah Bar David
QA Contact: Lucie Leistnerova
URL:
Whiteboard:
Depends On: 1807323 1835152 1835163
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-09-29 10:56 UTC by Juan Orti
Modified: 2024-12-20 19:16 UTC (History)
12 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1835163
Environment:
Last Closed: 2021-04-26 08:17:24 UTC
oVirt Team: Metrics
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 5442261 0 None None None 2020-09-29 10:56:55 UTC

Description Juan Orti 2020-09-29 10:56:56 UTC 
+++ This bug was initially created as a clone of Bug #1835163 +++

Description of problem:

Allow engine admins automatically be grafana admins when logging in using SSO/OAuth2.

This requires grafana 6.5, see dependent bug.

A workaround:

1. Login to the engine web admin as admin
2. Login to grafana with SSO - "Sign in with oVirt Engine Auth"
3. Sign out
4. Login with the internal grafana admin
5. Go to Configuration -> Users
6. Find the new user. The default email for the engine's default admin, admin@internal, is 'root@localhost'.
7. Change its Role to Admin.
8. Now you can logout and login again with SSO, it should have admin rights

admin@internal's email address used to be empty until 4.3, and in 4.4 we change it (also on upgrades) for SSO with grafana, as it requires an email address.

--- Additional comment from Sandro Bonazzola on 2020-05-14 07:33:16 UTC ---

Tentatively targeting 4.4.1, working with platform to get grafana rebase backported to RHEL 8.2.1
Note You need to log in before you can comment on or make changes to this bug.