Deploying Grafana as a FARGATE service in an AWS ECS cluster

Question

I'm having some issues with a Grafana deployment. After deploying Grafana, I cant change the default password for the admin account, which you have to do the first time you launch Grafana. I log in with the default credentials, then get prompted to enter a new password. When I do, I get an "unauthorized" error. Looking at the browsers console, it seems to give a 404 error when I try to submit a new password.

I'm using an RDS instance to store Grafana user data. The RDS instance is in the same subnet as the ECS cluster. I've attached the AmazonRDSDataFullAccess policy to the ECS task role but that did not help. I also tried making the RDS instance publicly available but that was also not helpful.

I'm using Grafana version 6.5.0. I was using the latest 7.1 but downgraded hoping it would solve my current issue.

Answer 1

Firstly make sure your RDS database has a security group allowing inbound access from the ECS cluster. This will grant you the inbound access to the RDS database that are required.

As Fargate is serverless, a node could be destroyed so any local configuration would be gone. As you're using RDS you should make sure you're using environment variables to specify the DB connection details.

Finally add these to your task definition, using the environment item. For secrets such as password for the RDS db use the secrets option.