Keystone as identity server for custom datasource

Grafana Plugin Development
1

I am developing a datasource plugin. The datasource requires token from keystone. To fetch the token I need to POST username and password to a keystone endpoint.

I am able to do all of this by fetching username and password from config html and storing them as properties of Datasource object. How are object properties stored by Grafana? Is there any way I can store them securely?

Also, is this the best way to go about authenticating with Keystone if I am stuck with this authentication method, or is there any backend feature that can simplify things for me?
Note: My keystone server may not always support BasicAuth.

I am targeting v3+ compatibility

2

no there is no secure way currently to handle Grafana user specific auth for data sources, it would require new backend features

1 Like