> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Self-hosted Grafana

> Setting up a self-hosted Grafana instance inside CKS

This guide shows you how to deploy and configure a self-hosted Grafana instance inside a CoreWeave Kubernetes Service (CKS) cluster. If you need more customization and control than [CoreWeave Grafana](/observability/managed-grafana) provides, you can deploy a self-hosted Grafana instance. With self-hosting, you can create new dashboards, export or edit CoreWeave Grafana dashboards, and freely explore all available metrics in your environment.

[CoreWeave Charts](/products/cks/clusters/coreweave-charts/introduction) deploys self-hosted Grafana instances. This handles most of the process of configuring data sources, but [authentication](#configure-coreweave-metrics-data-source-credentials) requires some manual configuration.

By the end of this guide, you have a running self-hosted Grafana instance connected to CoreWeave Metrics and CoreWeave Logs data sources.

## Prerequisites

To set up a self-hosted Grafana instance, you need the following:

* A [CoreWeave API Access Token](/security/authn-authz/managed-auth/api-access) for an active CKS account.
* A CKS cluster where you intend to self-host (deploy and manage) Grafana.
* [`kubectl`](https://kubernetes.io/docs/tasks/tools/) installed.
* [`helm`](https://helm.sh/docs/intro/install/) installed.

<Warning>
  Customers who self-host a Grafana instance are responsible for all setup, maintenance, and resource costs associated with hosting. CoreWeave recommends using [CoreWeave Grafana](/observability/managed-grafana).
</Warning>

## Install Grafana with CoreWeave Charts

This section installs the Grafana Helm chart into your cluster so the application is running and ready to configure.

1. Add the CoreWeave Charts repository:

   ```bash theme={"system"}
   helm repo add coreweave https://charts.core-services.ingress.coreweave.com
   ```

2. Install the `grafana` chart:

   ```bash theme={"system"}
   helm install -n "[MY-NAMESPACE]" grafana coreweave/grafana
   ```

<Tip>
  The `grafana-dashboards` chart is a dependency of `grafana`, so it does not need to be installed independently.
</Tip>

## Log in to Grafana with admin credentials

With Grafana installed, the next step is to reach the application in your browser and sign in as the administrator so you can finish configuration. Before you log in to Grafana, you must port forward your Grafana service.

1. Port forward your Grafana service:

   ```bash theme={"system"}
   kubectl port-forward svc/grafana -n "[MY-NAMESPACE]" 8900:80
   ```

2. Navigate to `localhost:8900`. You see a login page similar to the following:

   <img src="https://mintcdn.com/coreweave-dbfa0e8d/lx5AWUkfPyCw-jwp/observability/_media/grafana-login.png?fit=max&auto=format&n=lx5AWUkfPyCw-jwp&q=85&s=74f25ef0097f63919d72a85cbe13375b" alt="Grafana login page." width="517" height="527" data-path="observability/_media/grafana-login.png" />

3. Obtain the admin password, which is required to log in to Grafana for the first time. This password is stored as a Kubernetes Secret. Retrieve the Secret value, replacing `[MY-NAMESPACE]` with your namespace ID:

   ```bash theme={"system"}
   kubectl get secret grafana -n "[MY-NAMESPACE]" -o=jsonpath='{.data.admin-password}' | base64 --decode
   ```

   Note: If you use a Mac, you might need to remove the trailing `%`.

4. Use the returned value as your password when you log in to Grafana with the following credentials:

   | Field    | Value         |
   | -------- | ------------- |
   | Username | `admin`       |
   | Password | `[MY-SECRET]` |

## Configure CoreWeave Metrics data source credentials

After you log in to Grafana with your admin credentials, you must configure credentials for the CoreWeave-provided data sources so Grafana can authenticate to the CoreWeave observability backend. First, configure the CoreWeave Metrics data source.

### Configure the data source HTTP headers

The following HTTP header values are required to connect to CoreWeave's data sources, where `[MY-TOKEN]` is your CoreWeave [API Access Token](/security/authn-authz/managed-auth/api-access).

| Field  | Value               |
| ------ | ------------------- |
| Header | `Authorization`     |
| Value  | `Bearer [MY-TOKEN]` |

To configure these headers, navigate to **Connections** from Grafana's left-hand menu to display the dropdown options. Then, click **Data sources** to proceed to the **Data sources** page. Select **CoreWeave Metrics** from the options listed to proceed to the **Settings** menu for the new data source.

<img src="https://mintcdn.com/coreweave-dbfa0e8d/KBpmQl9RwHt6h498/observability/_media/grafana-connections-data-sources.png?fit=max&auto=format&n=KBpmQl9RwHt6h498&q=85&s=bbcb66936bb9fac4e1094b512949af78" alt="Grafana menu with data sources item indicated" width="604" height="796" data-path="observability/_media/grafana-connections-data-sources.png" />

Next, navigate to the **Authentication** section. This is the only section that requires editing.

<img src="https://mintcdn.com/coreweave-dbfa0e8d/bmSvzayNAcGFdaNU/observability/_media/grafana-authentication-http-header.png?fit=max&auto=format&n=bmSvzayNAcGFdaNU&q=85&s=865e1a087c63027d9fe7a26efdc4f41e" alt="Authentication section of Grafana data sources screen" width="1320" height="832" data-path="observability/_media/grafana-authentication-http-header.png" />

Then, click the dropdown arrow on the right-hand side of the **HTTP headers** subsection to display the **+ Add header** button.

<img src="https://mintcdn.com/coreweave-dbfa0e8d/bmSvzayNAcGFdaNU/observability/_media/grafana-authentication-add-http-header.png?fit=max&auto=format&n=bmSvzayNAcGFdaNU&q=85&s=e50c6ef79ee852959aa84fa7bfd13a8c" alt="HTTP headers section of Grafana data sources screen" width="1364" height="968" data-path="observability/_media/grafana-authentication-add-http-header.png" />

In the **Header** field, enter `Authorization`.

<img src="https://mintcdn.com/coreweave-dbfa0e8d/KBpmQl9RwHt6h498/observability/_media/grafana-http-header-fields.png?fit=max&auto=format&n=KBpmQl9RwHt6h498&q=85&s=4cc367f2366bbde25d1c5acc3deb01fd" alt="Custom header section of Grafana data sources screen" width="1250" height="336" data-path="observability/_media/grafana-http-header-fields.png" />

In the **Value** field, provide the value `Bearer [MY-TOKEN]`, where `[MY-TOKEN]` is your CoreWeave [API Access Token](/security/authn-authz/managed-auth/api-access).

Configure the HTTP method to use `GET` by changing the HTTP dropdown method in the **Other** subsection to `GET`:

<img src="https://mintcdn.com/coreweave-dbfa0e8d/lx5AWUkfPyCw-jwp/observability/_media/configure-get.png?fit=max&auto=format&n=lx5AWUkfPyCw-jwp&q=85&s=b1d16fd5aefb91bba50caadc6c3535c4" alt="Configure the HTTP method to use GET." width="536" height="163" data-path="observability/_media/configure-get.png" />

## Configure the CoreWeave Logs data source

After the configuration for the **CoreWeave Metrics** data source is complete, repeat the preceding steps for the **CoreWeave Logs** data source. With both data sources configured, your self-hosted Grafana instance can query CoreWeave metrics and logs.

## Learn more

For more information, explore the following resources:

* [Grafana documentation](https://grafana.com/docs/grafana/latest/) for guidance on tasks such as building dashboards, working with data sources, and exploring metrics.
* [Prometheus Query Language (PromQL) documentation](https://prometheus.io/docs/prometheus/latest/querying/basics/) to learn how to query the **CoreWeave Metrics** data in both ad-hoc Explore queries and advanced dashboard panels.