docs: Cloud Deployment Azure #15397
Open
docs: Cloud Deployment Azure #15397
+604
−5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
the
type/docs
JStickler
reviewed
Dec 12, 2024
Co-authored-by: J Stickler <julie.stickler@grafana.com>
|
Hey @JStickler that is the changes in and ready for your review :) |
JStickler
reviewed
Dec 16, 2024
Comment on lines
+19
to
+20
| - Manged Identity | ||
| - Federated Token |
There was a problem hiding this comment.
Suggested change
| - Manged Identity | |
| - Federated Token | |
| - Manged identity | |
| - Federated token |
| ## Considerations | ||
|
|
||
| {{< admonition type="caution" >}} | ||
| This guide was accurate at the time it was last updated on **11th of December, 2024**. As cloud providers frequently update their services and offerings, as a best practice, you should refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/?product=popular) before creating your storage account and assigning roles. |
There was a problem hiding this comment.
You don't need the text after a question mark in a URL.
Suggested change
| This guide was accurate at the time it was last updated on **11th of December, 2024**. As cloud providers frequently update their services and offerings, as a best practice, you should refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/?product=popular) before creating your storage account and assigning roles. | |
| This guide was accurate at the time it was last updated on **11th of December, 2024**. As cloud providers frequently update their services and offerings, as a best practice, you should refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/) before creating your storage account and assigning roles. |
| ## Configuring Azure Blob Storage | ||
|
|
||
| {{< admonition type="tip" >}} | ||
| Consider using unique bucket names rather than: `chunk`, `ruler` and `admin`. Although Azure Blog Storage is not directly affected by this [security update](https://grafana.com/blog/2024/06/27/grafana-security-update-grafana-loki-and-unintended-data-write-attempts-to-amazon-s3-buckets/) it is a best practice to use unique container names for buckets. |
There was a problem hiding this comment.
Suggested change
| Consider using unique bucket names rather than: `chunk`, `ruler` and `admin`. Although Azure Blog Storage is not directly affected by this [security update](https://grafana.com/blog/2024/06/27/grafana-security-update-grafana-loki-and-unintended-data-write-attempts-to-amazon-s3-buckets/) it is a best practice to use unique container names for buckets. | |
| Consider using unique bucket names rather than: `chunk`, `ruler`, and `admin`. Although Azure Blog Storage is not directly affected by this [security update](https://grafana.com/blog/2024/06/27/grafana-security-update-grafana-loki-and-unintended-data-write-attempts-to-amazon-s3-buckets/) it is a best practice to use unique container names for buckets. |
| - Kubectl installed on your local machine. Refer to [Install and Set Up kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/). | ||
| - Azure CLI installed on your local machine. Refer to [Installing the Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli). This is a requirement for following this guide as all resources will be created using the Azure CLI. | ||
|
|
||
| ### AKS Minimum Requirements |
There was a problem hiding this comment.
Suggested change
| ### AKS Minimum Requirements | |
| ### AKS minimum requirements |
|
|
||
| With the storage account and containers created, you can now proceed to creating the Azure AD role and federated credentials. | ||
|
|
||
| ## Creating the Azure AD Role and Federated Credentials |
There was a problem hiding this comment.
Suggested change
| ## Creating the Azure AD Role and Federated Credentials | |
| ## Creating the Azure AD role and federated credentials |
| loki-ruler-0 1/1 Running 0 10m | ||
| ``` | ||
|
|
||
| ### Find the Loki Gateway Service |
There was a problem hiding this comment.
Suggested change
| ### Find the Loki Gateway Service | |
| ### Find the Loki gateway service |
|
|
||
| ### Find the Loki Gateway Service | ||
|
|
||
| The Loki Gateway service is a LoadBalancer service that exposes the Loki gateway to the internet. This is where you will write logs to and query logs from. By default NGINX is used as the gateway. |
There was a problem hiding this comment.
Suggested change
| The Loki Gateway service is a LoadBalancer service that exposes the Loki gateway to the internet. This is where you will write logs to and query logs from. By default NGINX is used as the gateway. | |
| The Loki gateway service is a load balancer service that exposes the Loki gateway to the internet. This is where you will write logs to and query logs from. By default NGINX is used as the gateway. |
| The Loki Gateway service is a LoadBalancer service that exposes the Loki gateway to the internet. This is where you will write logs to and query logs from. By default NGINX is used as the gateway. | ||
|
|
||
| {{< admonition type="caution" >}} | ||
| The Loki Gateway service is exposed to the internet. We provide basic authentication using a username and password in this tutorial. Refer to the [Authentication](https://grafana.com/docs/loki/<LOKI_VERSION>/operations/authentication/) documentation for more information. |
There was a problem hiding this comment.
Suggested change
| The Loki Gateway service is exposed to the internet. We provide basic authentication using a username and password in this tutorial. Refer to the [Authentication](https://grafana.com/docs/loki/<LOKI_VERSION>/operations/authentication/) documentation for more information. | |
| The Loki gateway service is exposed to the internet. We provide basic authentication using a username and password in this tutorial. Refer to the [Authentication](https://grafana.com/docs/loki/<LOKI_VERSION>/operations/authentication/) documentation for more information. |
| The Loki Gateway service is exposed to the internet. We provide basic authentication using a username and password in this tutorial. Refer to the [Authentication](https://grafana.com/docs/loki/<LOKI_VERSION>/operations/authentication/) documentation for more information. | ||
| {{< /admonition >}} | ||
|
|
||
| To find the Loki Gateway service, run the following command: |
There was a problem hiding this comment.
Suggested change
| To find the Loki Gateway service, run the following command: | |
| To find the Loki gateway service, run the following command: |
| ```bash | ||
| kubectl get svc -n loki | ||
| ``` | ||
| You should see the Loki Gateway service with an external IP address. This is the address you will use to write to and query Loki. |
There was a problem hiding this comment.
Suggested change
| You should see the Loki Gateway service with an external IP address. This is the address you will use to write to and query Loki. | |
| You should see the Loki gateway service with an external IP address. This is the address you will use to write to and query Loki. |
|
💻 Deploy preview available: https://deploy-preview-loki-15397-zb444pucvq-vp.a.run.app/docs/loki/latest/ |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it:
Continuation of the cloud deployment guides. This teaches the user how to deploy Loki on Azure using the helm. Including:
I have also added some opinionated recommendations to the helm index page for review aswell.
Checklist
CONTRIBUTING.mdguide (required)featPRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.docs/sources/setup/upgrade/_index.mddeprecated-config.yamlanddeleted-config.yamlfiles respectively in thetools/deprecated-config-checkerdirectory. Example PR