Allow anonymous access to nagios dashboard

Description

Right now you need a password to just view the main page of monitoring.ovirt.org.
It will be better if you won't need to login just to view the status, that way anyone can look at current status w/o logging in and verify if there is an outage.

Activity

Show:

Eyal Edri December 15, 2018 at 3:07 PM

https://monitoring.ovirt.org/nagios/ is public and hosted on the community cage.

Marc Dequènes (Duck) March 26, 2018 at 9:01 AM

Is Icinga not using RAM at all? providing 1GB is totally fine, but it seems a very low requirement compared to Zabbix for example.

OK for CPU

8GB is for Icinga's data I guess? Normally we provide a 8GB system disk and additional storage if needed. So 8+8 IIRC?

I guess there is a public web fontend, so a public IP is needed.

It would replace monitoring.ovirt.org? It seems the web host is serving unrelated things, like the apps tree, maybe we should move this in a proper place.

So it should be fine. Let's add a condition to this for the sake of having a nice infra: the machine should entirely be deployed using Ansible, no manual manipulation slightly smiling face)) Hope you're up to the challenge!
(I can give a hand of course)

Former user March 26, 2018 at 8:36 AM

The version currently in use is:
icinga-1.8.4-4.el6.rf.x86_64

Hardware used:

  • 512MB RAM

  • 2 vCPU

  • 8 GB HDD

is there some place in the community cage to host a small VM like this? If yes - we should open a new ticket and move monitoring there. I already have this tested using a VM in PHX but we need something outside the DC for resilience.

I don't think el7 will even install with >1 GB RAM so we can bump the specs up a bit.

Sahil Joseph March 15, 2018 at 1:15 PM

After yesterday's community call how should we go ahead with this issue ?

Former user March 8, 2018 at 2:24 PM

This is is normally done by setting default_user_name=guest in /etc/icinga/cgi.cfg
In our case, however, apache is managing authentication so we can't just skip it.

To avoid this we can add a welcome page to https://monitoring.ovirt.org/ noting the guest user/pass to use. Admins will use their own credentials to manage notifications and other routine stuff in parallel.

Another solution I've done before is to set up a reverse-proxy that would authenticate and display a certain dashboard - this way no auth will be required yet it's much more tricky to do right.

Fixed

Details

Assignee

Reporter

Priority

Created March 26, 2017 at 6:53 AM
Updated August 29, 2019 at 2:12 PM
Resolved December 15, 2018 at 3:07 PM

Flag notifications