Skip to content

feat(dashboards): add the CloudWatch GrafanaDatasource CR the persona boards query#58

Merged
stxkxs merged 1 commit into
mainfrom
add-cloudwatch-datasource
Jun 24, 2026
Merged

feat(dashboards): add the CloudWatch GrafanaDatasource CR the persona boards query#58
stxkxs merged 1 commit into
mainfrom
add-cloudwatch-datasource

Conversation

@stxkxs

@stxkxs stxkxs commented Jun 24, 2026

Copy link
Copy Markdown
Member

Eight panels across the agent ops / kill-switch / agentgateway / finance dashboards set "datasource": "cloudwatch" to graph CloudWatch-native AWS metrics (AWS/SQS depth, AWS/States execution health, AWS/Events failures, AWS/Bedrock throttling) — none with a Prometheus equivalent. No GrafanaDatasource CR of that type existed, so they all rendered "datasource not found".

The capability was already there — the landing-zone AMG workspace enables the CloudWatch plugin and its service role has CloudWatch read IAM; only the datasource instance was missing. This adds it (type cloudwatch, uid cloudwatch, ec2_iam_role auth, region us-west-2 — constant across envs, no per-env patch).

The finance board's 4 athena-cur panels are a separate cross-repo fix (AMG Athena plugin + service-role IAM + per-env workgroup wiring), tracked as its own issue.

yamllint clean; cloudwatch DS renders into all four overlay builds.

… boards query

Eight panels across the agent ops / kill-switch / agentgateway / finance dashboards
set "datasource": "cloudwatch" to graph CloudWatch-native AWS metrics — AWS/SQS queue
depth, AWS/States Step Functions execution health, AWS/Events rule failures,
AWS/Bedrock throttling — none of which have a Prometheus equivalent. No GrafanaDatasource
CR of that type existed, so every one rendered "datasource not found".

The capability was already in place: the landing-zone AMG workspace enables the
CloudWatch plugin (data_sources includes CLOUDWATCH) and its service role carries
CloudWatch read IAM. Only the datasource instance was missing. This adds it:
type cloudwatch, uid cloudwatch, access proxy, authType ec2_iam_role (the workspace's
ambient role, no static keys), defaultRegion us-west-2 — constant across environments,
so no per-env overlay patch.

The finance board's four athena-cur panels are a separate, larger cross-repo fix
(AMG Athena plugin + service-role IAM + per-env workgroup wiring) tracked separately.
@github-actions

Copy link
Copy Markdown

CI Results

Check Status
YAML Lint
Environment Kustomize Build
dev
staging
production
hub

All validations passed.

@stxkxs stxkxs merged commit 79d1430 into main Jun 24, 2026
8 checks passed
@stxkxs stxkxs deleted the add-cloudwatch-datasource branch June 24, 2026 01:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant