OpenIM Admin Dashboard cannot load Grafana due to CORS and X-Frame-Options restrictions (Docker deployment)

OpenIM Server Version

3.8.0

Operating System and CPU Architecture

Linux (AMD)

Deployment Method

Docker Deployment

Bug Description and Steps to Reproduce

Hi team,

I’m using Docker (docker-compose) to deploy OpenIM with Prometheus and Grafana.

Prometheus targets are UP and Grafana works fine when accessed directly
(http://:13000).

However, when opening the monitoring/dashboard page in OpenIM Admin
(http://:11002), the browser blocks the request due to:

• CORS policy (no Access-Control-Allow-Origin)
• X-Frame-Options set to deny (iframe blocked)

It seems the Admin frontend tries to fetch or embed Grafana directly,
but Grafana’s default security settings block this in Docker deployments.

It would be helpful if the documentation mentioned the required Grafana
configuration (e.g. allow_embedding or CORS settings).

Thanks!

Screenshots Link

No response

Start with the Docker Compose deployment configuration and the Grafana service settings, then reproduce the Admin dashboard access through port 11002 while checking the browser’s CORS and iframe errors. Document the required Grafana configuration for embedding and cross-origin access, with verification that Grafana still works directly on port 13000 and loads inside the Admin dashboard.