Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Grafana on EKS – Install and Test

Grafana on EKS – Install and Test Deploy Grafana via Argo CD on EKS and access it locally with port-forward. The Application manifest includes persistence, Prometheus datasource, and health probes. 1. Overview What this g…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




Grafana on EKS – Install and Test



Deploy Grafana via Argo CD on EKS and access it locally with port-forward. The Application manifest includes persistence, Prometheus datasource, and health probes.









1. Overview



What this guide does:




  • Deploys Grafana using the official Helm chart via an Argo CD Application

  • Creates an AppProject and Application for the grafana namespace

  • Configures Prometheus as the default datasource (pre-configured for dashboards)

  • Persists data with EBS-backed PVC

  • Uses port-forward for local access (no ingress required)



Prerequisites:




  • EKS cluster running with kubectl context set


  • Argo CD installed


  • Prometheus installed









2. Prerequisites



Before starting, ensure you have:





  • kubectl configured with context set to your EKS cluster


  • Argo CD installed and syncing Applications


  • Prometheus running (e.g. kube-prometheus-stack-prometheus.kube-prometheus-stack.svc.cluster.local:9090—adjust the datasource URL if yours differs)









3. Install Grafana



Save the manifest below as grafana-application.yaml and apply:




kubectl apply -f grafana-application.yaml






Argo CD will create the Application and sync Grafana (Helm chart). Wait until the Application shows Synced in the Argo CD UI or CLI.



Manifest:




apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
name: platform
namespace: argocd
spec:
clusterResourceWhitelist:
- group: "*"
kind: "*"
destinations:
- namespace: "*"
server: "*"
namespaceResourceWhitelist:
- group: "*"
kind: "*"
sourceRepos:
- "*"
---
apiVersion: v1
kind: Namespace
metadata:
name: grafana
labels:
name: grafana
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: grafana
namespace: argocd
spec:
project: platform
source:
repoURL: https://grafana.github.io/helm-charts
chart: grafana
targetRevision: 7.0.0
helm:
values: |
deploymentStrategy:
type: Recreate
persistence:
enabled: true
type: pvc
storageClassName: ebs-sc
size: 10Gi
service:
type: ClusterIP
adminUser: admin
datasources:
datasources.yaml:
apiVersion: 1
datasources:
- name: Prometheus
type: prometheus
access: proxy
url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack.svc.cluster.local:9090
isDefault: true
editable: true
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 250m
memory: 256Mi
startupProbe:
httpGet:
path: /api/health
port: 3000
periodSeconds: 5
failureThreshold: 18
readinessProbe:
httpGet:
path: /api/health
port: 3000
periodSeconds: 10
failureThreshold: 3
livenessProbe:
httpGet:
path: /api/health
port: 3000
initialDelaySeconds: 30
periodSeconds: 10
failureThreshold: 10
destination:
server: https://kubernetes.default.svc
namespace: grafana
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true






Note: Adjust storageClassName if your EKS cluster uses a different EBS storage class. Ensure Prometheus URL matches your install (e.g. kube-prometheus-stack-prometheus.kube-prometheus-stack.svc.cluster.local:9090).









4. Test Access






Port-forward






kubectl port-forward svc/grafana -n grafana 3000:80









Get admin password






kubectl get secret grafana -n grafana -o jsonpath="{.data.admin-password}" | base64 -d
echo









Login



Open http://localhost:3000 and sign in with admin and the password from above.






Verify datasource



Go to Connections → Data sources. Prometheus should be configured and ready. Create a dashboard and run a query to confirm.









5. Summary: Copy-Paste






# 1. Apply manifest
kubectl apply -f grafana-application.yaml

# 2. Wait for sync (check Argo CD UI or: argocd app get grafana)

# 3. Port-forward and get password
kubectl port-forward svc/grafana -n grafana 3000:80 &
kubectl get secret grafana -n grafana -o jsonpath="{.data.admin-password}" | base64 -d && echo






Then open http://localhost:3000 and log in with admin / the password.









6. Troubleshooting



Issue: Application stuck in Syncing or OutOfSync



Solution: Check Argo CD logs and the Application status. Ensure the Grafana Helm repo is reachable and storageClassName: ebs-sc exists in your cluster. If using a different storage class, update the manifest.



Issue: Prometheus datasource connection failed



Solution: Verify Prometheus is running: kubectl get svc -n kube-prometheus-stack (or your Prometheus namespace). Update the url in the manifest to match your Prometheus service.



Issue: Argo CD ingress stuck or inaccessible



Solution: See Argo CD Ingress Stuck – Find & Fix for troubleshooting steps.









7. References



1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Grafana on EKS – Install and Test
id: 90e86267-4259-4367-9d2f-128b96eb0524
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Grafana on EKS – Install and T" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Grafana on EKS  Install and Test")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Grafana on EKS  Install and Test*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Grafana on EKS  Install and Test"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Grafana on EKS – Install and Test.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Grafana on EKS – Install and Test

Thematisch verwandte Begriffe: Grafana, Install, Test · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97648 | A vulnerability was detected in ningzichun student-management-system up …
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag