Grafana upgrade? | NetApp | Page 1

stiff widget Sep 19, 2023, 7:11 PM

#

Followed the information in another post about upgrading Grafana as 8.x is way out of date and our security team threw a fit about it being online.
Upgraded to 9.5.10 and that seems to be working just fine.
However, if you upgrade to 10.x it simply no longer loads.
When you go to https://nabox.host/grafana it times out in an attempt to redirect to localhost:3000/grafana, or if you have a domain configured it attempts to use https://your.configured.domain/grafana
as an example, configured domain = internal.hosting.ops it tries to redirect to https://internal.hosting.ops/grafana instead of the full host/domain name, or even the IP if you try to use that.
Have only attempted to do this with OSS as we have no interest in Enterprise.

Any idea/thoughts or is this something that needs to go to Grafana support?

balmy pagoda Sep 19, 2023, 7:33 PM

#

hi @stiff widget I'll let @wintry wing answer the nabox question, but I believe you are mistaken on 8.x being out of date.

The previous minor version, and the last minor version of the previous major version gets security and critical bug fixes according to https://deploy-preview-2100--endoflife-date.netlify.app/grafana#release-schedule 8.X still gets security support, the latest CVEs were fixed in 8.5.27

It's also my understanding that Grafana has not prioritized backwards compatibility (likely why Grafana 10 is not working for you), and there is sometimes a lot of work required by downstream consumers (like Harvest) to upgrade to a new major and sometimes minor release. e.g. https://utcc.utoronto.ca/~cks/space/blog/sysadmin/GrafanaLowBackwardCompatibility

stiff widget Sep 19, 2023, 8:00 PM

#

Our security scan is what brought up the version being out of date and EOL
https://endoflife.date/grafana
It shows end of life over 2 years ago, regardless of security patches being available, it's flagged as EOL.
Upgrading to 9 will end up causing the same alerts as it is EOL and no support being generated for it other than 9.5.10, but same problem.. EOL.

Thanks for the feedback

endoflife.date

Grafana

Check end-of-life, release policy and support schedule for Grafana.

#

Also, not really related to this, but sort of.. maybe.. I have deployed NAB on Azure and have been going through the process of documenting on how to do so for anyone else that might be interested in doing this. Anywhere that I can send that to get some once over and approval to have it put somewhere for others to use once completed?

balmy pagoda Sep 20, 2023, 12:02 PM

#

hi @stiff widget thanks! Which column are you using to determine end of life? Active or Security support? That same page lists what I pasted above about 8.5.27 receiving security support?

#

we'd love to take a look at your documentation when you finish! - we can go the normal contribution route, or if that's too onerous, we can trade emails https://github.com/NetApp/harvest/blob/main/CONTRIBUTING.md

wintry wing Sep 20, 2023, 3:55 PM

#

I'll work on the Grafana 10 upgrade

stiff widget Sep 20, 2023, 4:15 PM

#

balmy pagoda hi <@263796242226610197> thanks! Which column are you using to determine end of ...

active support, it's the only thing the security scan looks at. I've already put a note in that the system is still getting patches/fixes so we'll see what it comes back with. This is Alert Logic, just to note

balmy pagoda Sep 20, 2023, 6:53 PM

#

understood

inland needle Nov 14, 2023, 6:20 AM

#

@stiff widget I also need to upgrade grafana 10.x due to security concern. Would you let me know if you have resolution?

stiff widget Nov 14, 2023, 6:21 AM

#

I do not as of yet

inland needle Nov 14, 2023, 6:22 AM

#

Thanks

stiff widget Nov 17, 2023, 4:26 AM

#

any updates to grafana 10?

wintry wing Nov 21, 2023, 7:43 PM

#

Not yet sorry. I had to iron out some issues with current 3.4b, once the release is out I’ll be able to work on that. First I need to check that Harvest dashboards play well with it, then refactor the authentication tokens nabox needs to interact with grafana config

wintry wing Nov 21, 2023, 8:23 PM

#

Btw, there is a new beta building as we speak that includes 9.5.14

wintry wing Nov 22, 2023, 9:11 AM

#

Annnnd, it's available ! https://nabox.org/downloads/

stiff widget Nov 24, 2023, 5:25 PM

#

thanks. I have no way of doing an update on Azure, so it's a full redploy each time. fun fun

wintry wing Nov 24, 2023, 7:05 PM

#

How so ?

spiral dawn Nov 28, 2023, 9:00 PM

#

wintry wing Annnnd, it's available ! https://nabox.org/downloads/

can we go straight from 3.3 to 3.4.1b or do we need to go to 3.4 first?

wintry wing Nov 28, 2023, 9:04 PM

#

Straight

#

We’ll figure it out if it fails 😀

spiral dawn Nov 28, 2023, 9:37 PM

#

wintry wing We’ll figure it out if it fails 😀

First issue: I had anonymous dashboards enabled. The upgrade cleared that and required authentication. The previous setting should be maintained.
Second issue: the upgrade cleared my Enable LDAP setting for grafana. Fortunately it saved the config but unchecked the box to use it. Checking the box again allowed me to login. I allow logins but don't mandate them.

#

admin Dashboard page lists how many Clusters Actively Reporting. Should probably include count of grids too since StorageGRID is fully supported.

wintry wing Nov 29, 2023, 6:15 AM

#

Well done and sorry about that, I ll cahck what’s going on with grafana config

wintry wing Dec 4, 2023, 8:14 AM

#

Well it seems that GRAFANA settings reset on update has been going on for a while

spiral dawn Dec 4, 2023, 2:52 PM

#

wintry wing Well it seems that GRAFANA settings reset on update has been going on for a whil...

weird that nobody, including me, reported it...

#Grafana upgrade?