ARCHIVE/rippled
1
0
Fork 0
mirror of https://github.com/XRPLF/rippled.git synced 2026-09-30 08:48:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(telemetry): stop publishing the Grafana renderer on the host

Browse Source 
Grafana reaches the image renderer over the compose network at
http://renderer:8081, so the host publish gave nothing the stack needs.
AUTH_TOKEN is the only guard on the endpoint and its default is a fixed
string in this file.

Update the service table in the configuration reference to match.
This commit is contained in:
Pratik Mankawde
2026-09-10 15:42:02 +01:00
parent 2b6a5733e7
commit 5f68b22cec
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
OpenTelemetryPlan/05-configuration-reference.md
View File

@@ -353,7 +353,7 @@ The authoritative development stack lives in the repo at `docker/telemetry/docke
| `loki` | `grafana/loki:3.7.6` | `3100` | Log storage for log↔trace correlation |
| `prometheus` | `prom/prometheus:v3.13.2` | `9090` | Scrapes the collector's `:8889` |
| `grafana` | `grafana/grafana:13.1.2` | `3000` | Dashboards + provisioned datasources/alerts, anonymous admin |
| `renderer` | `grafana/grafana-image-renderer:v5.12.0` | `8081` | Panel→PNG rendering for image export and alert screenshots |
| `renderer` | `grafana/grafana-image-renderer:v5.12.0` | none | Panel→PNG rendering for image export and alert screenshots |
Two corrections to earlier drafts:

6
docker/telemetry/docker-compose.yml
View File

@@ -214,8 +214,10 @@ services:
# Shared secret for the JWT-authenticated render requests Grafana 13
# sends. Must match GF_RENDERING_RENDERER_TOKEN on the grafana service.
- AUTH_TOKEN=${GF_RENDERING_RENDERER_TOKEN:-xrpld-local-render}
ports:
- "8081:8081" # Renderer HTTP endpoint (called by grafana)
# No `ports:` on purpose. Grafana reaches this over the compose network at
# http://renderer:8081, so publishing 8081 on the host adds nothing the
# stack needs. AUTH_TOKEN above is the only guard on the endpoint, and its
# default is a fixed string in this file, so keep the service off the host.
networks:
- xrpld-telemetry
# Named volume for Tempo trace storage (WAL and compacted blocks).