From e9ddc82a49d794feab2c8066de64accd4437437f Mon Sep 17 00:00:00 2001
From: Jan David Mol <mol@astron.nl>
Date: Fri, 10 Jan 2025 11:08:51 +0100
Subject: [PATCH] L2SS-2107: Describe how to (re)create the Grafana token for
Garibaldi
---
infra/garibaldi-central.levant.nomad | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/infra/garibaldi-central.levant.nomad b/infra/garibaldi-central.levant.nomad
index cbecf33..4110c3f 100644
--- a/infra/garibaldi-central.levant.nomad
+++ b/infra/garibaldi-central.levant.nomad
@@ -8,7 +8,6 @@ job "daily-backup-grafana-to-s3" {
}
group "garibaldi" {
-
vault {
policies = ["default"]
}
@@ -26,6 +25,11 @@ job "daily-backup-grafana-to-s3" {
GRAFANA_URL = "https://monitoring.lofar.net:443"
}
+ # Note: the Grafana service account token needs to be recreated if Grafana is redeployed:
+ # 1. Create an Admin service account at https://monitoring.lofar.net/org/serviceaccounts/
+ # 2. Create a service account token for that account
+ # 3. Upload the token to vault at https://vault.lofar.net/ui/vault/secrets/kv-v2/kv/grafana%2Fgaribaldi
+
template {
env = true
destination = "secrets/file.env"
@@ -40,4 +44,4 @@ job "daily-backup-grafana-to-s3" {
}
}
}
-}
\ No newline at end of file
+}
--
GitLab