Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create and configure read-only RDS user for Grafana integration #3422

Open
8 tasks
elipe17 opened this issue Jan 14, 2025 · 0 comments
Open
8 tasks

Create and configure read-only RDS user for Grafana integration #3422

elipe17 opened this issue Jan 14, 2025 · 0 comments
Labels
dev Refined Ticket has been refined at the backlog refinement

Comments

@elipe17
Copy link

elipe17 commented Jan 14, 2025

Background

To support OFA's data access needs via PLG we need to create a read only user in all of our RDS Postgress databases. This user would then be connected to our Grafana datasource which would prevent Grafana users from deleting/modifying data as they try to create dashboards or export the data.

Acceptance Criteria

  • Postgres datasource is connected to read only RDS user
  • Read only style queries are the only style of queries that can be run via Grafana
  • Old Postgres datasource is removed
  • Testing Checklist has been run and all tests pass
  • README is updated, if necessary

Tasks

  • Add read only RDS Postgres user to all databases
  • Update Grafana to leverage new user in Postgres datasource
  • Run Testing Checklist and confirm all tests pass

Notes

Aws provides a guideline fro creating readonly users/roles

@elipe17 elipe17 added the dev label Jan 14, 2025
@lhuxraft lhuxraft added the Refined Ticket has been refined at the backlog refinement label Jan 14, 2025
@lhuxraft lhuxraft changed the title Create ReadOnly User in RDS Create and configure read-only RDS user for Grafana integration Jan 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dev Refined Ticket has been refined at the backlog refinement
Projects
None yet
Development

No branches or pull requests

2 participants