Custom Cloud Using "clouds_config" Certificates

Grafana Configuration
1

  • What Grafana version and what operating system are you using?
    Using Grafana Iron Bank container 12.2.1 on a RHEL8 OS.

  • What are you trying to achieve?
    Configure a custom cloud configuration for Azure-Monitor using the “clouds_config” section in the grafana.ini. Create an instance of the custom Azure-Monitor data source. Test the data source successfully.

  • How are you trying to achieve it?
    Using the “clouds_config” section in grafana.ini. I have tried setting every “skip_verify_insecure” setting I believe related to Azure Monitor data source.

  • What happened?
    Getting “failed to verify certificate: x509 certificate signed by unknown authority”

  • What did you expect to happen?
    No errors when hitting test.

  • Can you copy/paste the configuration(s) that you are having problems with?
    No. I work in a secure network.

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.
    “failed to verify certificate: x509 certificate signed by unknown authority”

  • Did you follow any online instructions? If so, what is the URL?
    Using this ini example to setup the custom Azure Monitor data source endpoints:
    grafana/conf/sample.ini at 9c0da8c30e16d4e292aa8cd7c4f1d2f0dbee1b2f · JonCole/grafana · GitHub

    If I am unable to set a “skip_verify” for the TLS cert checks, where do I need to have the certs in order for the Azure Monitor data source to very the certs?

2

Looks like I was able to get past the certs error. Placed the cert chain PEM file into “/etc/ssl/certs” directory. I was thinking they needed to be within “/etc/ssl/certs/grafana”.

However, now I am getting a AADSTS50049 error: failed to retrieve Azure access token. Does the Azure Monitor datasource redirect to “https://login.microsoft.login/common/discovery/instance” if it fails on the "aadAuthority” setting I defined?