<p>I have a few <code>openshift (4.8)</code> clusters monitored centrally by Thanos.<br />
I'm trying to configure the Grafana (version install outside the clusters <code>8.3.1</code>) Datasource with no success.</p>
<p>When accessing the URL from my desktop works well. However, when accessing from the Datasource configuration panel I am getting a 403 error</p>
<p>My hypothesis is that I have misconfigured something related to the TLS keys.<br />
Any ideas?</p>
<p>This is the content of the logs error:</p>
<pre><code>t=2021-12-31T16:08:05+0200 lvl=eror msg=&quot;Instant query failed&quot; logger=tsdb.prometheus query=1+1 err=&quot;Post \&quot;https://thanos-querier-openshift-monitoring.mycluster/api/v1/query\&quot;: x509: certificate signed by unknown authority&quot;
t=2021-12-31T16:08:05+0200 lvl=info msg=&quot;Request Completed&quot; logger=context userId=1 orgId=1 uname=admin method=POST path=/api/ds/query status=400 remote_addr=[::1] time_ms=33 size=166 referer=http://localhost:3000/datasources/edit/wTJvnKAnk
t=2021-12-31T16:08:13+0200 lvl=eror msg=&quot;Instant query failed&quot; logger=tsdb.prometheus query=1+1 err=&quot;client_error: client error: 403&quot;
t=2021-12-31T16:08:13+0200 lvl=info msg=&quot;Request Completed&quot; logger=context userId=1 orgId=1 uname=admin method=POST path=/api/ds/query status=400 remote_addr=[::1] time_ms=53 size=65 referer=http://localhost:3000/datasources/edit/wTJvnKAnk
t=2021-12-31T16:08:14+0200 lvl=eror msg=&quot;Instant query failed&quot; logger=tsdb.prometheus query=1+1 err=&quot;client_error: client error: 403&quot;
t=2021-12-31T16:08:14+0200 lvl=info msg=&quot;Request Completed&quot; logger=context userId=1 orgId=1 uname=admin method=POST path=/api/ds/query status=400 remote_addr=[::1] time_ms=50 size=65 referer=http://localhost:3000/datasources/edit/wTJvnKAnk
t=2021-12-31T16:39:17+0200 lvl=eror msg=&quot;Instant query failed&quot; logger=tsdb.prometheus query=1+1 err=&quot;client_error: client error: 403&quot;
t=2021-12-31T16:39:17+0200 lvl=info msg=&quot;Request Completed&quot; logger=context userId=1 orgId=1 uname=admin method=POST path=/api/ds/query status=400 remote_addr=[::1] time_ms=81 size=65 referer=http://localhost:3000/datasources/edit/wTJvnKAnk
</code></pre>

Tomer Aharoni
<p>You have a problem with TLS verification:</p>
<pre><code>x509: certificate signed by unknown authority
</code></pre>
<p>The easiest option is to check <code>Skip TLS Verify</code> in the Prometheus datasource, so Grafana will not verify used TLS certificate used by Prometheus.</p>
<p>More secure (and more complicated) option will be to add used CA cert also to the Grafana container, so Grafana will be able to verify Prometheus cert.</p>
