👋 Hi everyone! I have installed https://github.com/rancher/charts/tree/dev-v2.10/packages/rancher-monitoring As you know 🙂 I can access Grafana, but as if through such a Rancher proxy: https://rancher.mydomain.com/api/v1/namespaces/cattle-monitoring-system/services/http:rancher-monitoring-grafana:80/proxy/dashboards. I want to access Grafana directly, e.g. via https://monitoring.mydomain.com The service name is rancher-monitoring-grafana in namespace cattle-monitoring-system I created Ingress on service _rancher-monitoring-grafana_:

apiVersion: <http://networking.k8s.io/v1|networking.k8s.io/v1>
kind: Ingress
metadata:
  name: grafana-ingress
  namespace: cattle-monitoring-system
  annotations:
    <http://nginx.ingress.kubernetes.io/backend-protocol|nginx.ingress.kubernetes.io/backend-protocol>: "HTTP"
    <http://cert-manager.io/cluster-issuer|cert-manager.io/cluster-issuer>: letsencrypt
spec:
  ingressClassName: nginx
  rules:
  - host: <http://monitoring.mydomain.com|monitoring.mydomain.com>
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: rancher-monitoring-grafana
            port:
              number: 80
  tls:
  - hosts:
    - <http://monitoring.mydomain.com|monitoring.mydomain.com>
    secretName: grafana-tls-secret

It works nice - I have SSL certificate generated by cert-manager, Grafana is opening. The problem is that to use it I need to by logged in Rancher. I need to get some people access to my Grafana but without getting them access to Rancher itself. Is it possible? Thank you in advance for your thoughts :)

We have a centralized Grafana deployment, Then, setup an ingress for prometheus and add that as a datasource in Grafana

Of course I have Prometheus as a data source in my Grafana, it is what I got automatically

what I am saying is, deploy Grafana independently (outside of monitoring app) and then add prometheus there as datasource. If you do not want to do that, then when you deployed monitoring app, check the yaml to see if there is some setting that is doing auth proxy

thanks for that but in that case it would be sufficient for me to install kube-prometheus-stack, not the rancher stack 😞