7 ms·
How do you deal with Grafana having no isolation? Do you deploy a new instance per client? Each user has full access to all datasources from what I've seen.
by tokenizerrr 10y ago
How do you deal with Grafana having no isolation? Do you deploy a new instance per client? Each user has full access to all datasources from what I've seen.
- agentgt 10y agoWe use Grafana for our own internal usage (albeit we do have customer viewable analytics but it is proprietary hardcoded panes). I suppose you are confused because of my mentioning building product based on shindig. That was a previous employment many moons ago. I now am a many hat wearing owner of a SaaS. While I'm speaking of Grafana I find Kibana for more useful probably because we have a lower level of traffic than big boys but still produce an atrocious amount of logging. Logs are damn useful. In some ways metrics are actually a subset of event aggregation (ie logs) so I think Kibana is more useful at first.
- regecks 10y agoYou are mistaken. Grafana has RBAC and datasource isolation.
- tokenizerrr 10y agoI wasnt entirely clear in my previous comment, grafana allowed clients to issue full queries against all datasources the user has access to. So if you have one datasource with metrics of all your users and want to give them access to dashboards that only display their own data, that is not secure.
- regecks 10y agoAh, ok. I had the same problem (from Graphite era) but splitting the datasources up was fairly painless.