Azure Authentication

[yesoreyeram]

Steps to connect to Azure APIs.

1. Create a new service client in azure portal
2. Create a client secret for the client created above
3. Note down the Client ID, Client Secret and Tenant ID
4. Give reader/monitoring reader access to the resources/subscriptions as necessary
5. Install the infinity plugin in Grafana and add data source for the same
6. Expand Authentication section and select "OAuth2"
7. Select "Cllient Credentials" as OAuth2 type
8. Specify the Client ID
9. Specify the Client Secret
10. Specity the Token URL https://login.microsoftonline.com/<TENENT_ID>/oauth2/token. Replace <TENENT_ID> with yours
11. Leave the Scopes section empty
12. Add the following Endpoint param
    1. Key : resource Value: https://management.azure.com/
13. If you are using Infinity 1.0.0+, then specify https://management.azure.com/ as an allowed URL.
14. Click Save and Test.
15. Click the Explore button
16. Configure the query
17. Specify json as query type
18. Specify url as source
19. Specify default parser ( only applicable for Infinity 1.0.0+)
20. Specify table as format
21. Method : GET
22. URL : https://management.azure.com/subscriptions?api-version=2020-01-01
23. Click Run Query and you will see the results

Config Editor

Query using Default Parser

Query using Backend Parser

Query using UQL Parser

[itsjusth]

Thank you! This worked perfectly.

[switchgl]

Thank you for the above, this works as expected!

What would the configuration be if I'm trying to access data in a blob storage container? I understand the resource setup would be https://storage.azure.com/ which I've set along with adding it as an allowed host however I get an error "Cannot read properties of null (reading 'trim')" using an older version of the infinity plugin and error "400 Authentication information is not given in the correct format. Check the value of Authorization header." using the latest version of the infinity plugin.

is there a known working configuration setup for accessing azure blob storage containers using AD auth? essentially I have a csv file stored in an azure blob storage container that I want to display in a dashboard.

Using SAS token authentication works fine however I have only managed to get it working by pasting the full URL into the URL field in the dashboard itself which has the SAS token visible (not something I want visible) and I can't seem to get it working setting the SAS token in the data source area itself as it doesn't seem to parse it properly so errors no matter what settings I choose.

[yesoreyeram]

Hiya.. sorry for the delay. I don't think azure blob storage supports this type of authentication. I am planning to add support for providing azure blob storage key authentication in an upcoming version. Thanks for trying.

[yesoreyeram]

version2.1.0 supports reading content from azure blob storage.

[crlgb]

Do you intend to support Azure Table Storage in future versions as well? :)

[paige-muon]

@yesoreyeram just a heads up, this type of authentication is broken in the latest version of grafana: #668
I opened a support request with grafana and they confirmed it is something in the plugin that they aren't able to do anything about.

[yesoreyeram]

Does this works in older version of grafana? BTW, You meant this is grafana issue or plugin issue?

If it works in older version of grafana, i suggest to use that as workaround to configure. Then you can update the grafana.

I can look into this in detail after my parental leave. Thanks.

[paige-muon]

Oauth2 authentication in this plugin broke when grafana was updated, but I followed up with grafana and they are not able to do anything about it. I hoped they would have seen other impacts from whatever causes this elsewhere in grafana and then fix it, but apparently not.

[yesoreyeram]

Hi @paige-muon - this is already fixed in latest version. Can you check and confirm?

[paige-muon]

Yup, this was an old comment. Everything is working now

[ganesh1255]

The steps mentioned above worked fine with plugin version 2.9.6, but with the latest version of the plugin the error message shows
oauth2: "invalid request": The 'resource' request parameter is not supported.

[yesoreyeram]

Can you help with reproduction steps? If reproducible, create a bug report please.