Document how to get grafana credentials.

Author: pantierra

CHANGELOG.md

@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Make integration tests fail properly
 - Temporarily skip VRT driver in GDALg to avoid https://github.com/OSGeo/gdal/issues/12645
 - Consistent naming of behavior field
+- Improved documentation on obtaining grafana credentials
 
 ## [0.7.13] - 2025-11-04
 

docs/observability.md

@@ -34,9 +34,8 @@ helm install eoapi eoapi/eoapi \
   --set monitoring.prometheus.enabled=true \
   --set observability.grafana.enabled=true
 
-# Access Grafana (get password)
-kubectl get secret eoapi-grafana -n eoapi \
-  -o jsonpath="{.data.admin-password}" | base64 -d
+# Access Grafana (see "Accessing Grafana" section below for credentials)
+kubectl port-forward -n eoapi svc/eoapi-obs-grafana 3000:80
 ```
 
 ### Using Configuration Files
@@ -213,6 +212,22 @@ Minimum resource requirements (actual usage varies by cluster size and metrics v
 
 ## Operations
 
+### Accessing Grafana
+
+```bash
+# Get Grafana admin username (usually 'admin')
+kubectl get secret -n eoapi -l app.kubernetes.io/name=grafana \
+  -o jsonpath="{.items[0].data.admin-user}" | base64 --decode
+
+# Get Grafana admin password
+kubectl get secret -n eoapi -l app.kubernetes.io/name=grafana \
+  -o jsonpath="{.items[0].data.admin-password}" | base64 --decode
+
+# Port-forward to access Grafana UI
+kubectl port-forward -n eoapi svc/eoapi-obs-grafana 3000:80
+# Access at http://localhost:3000
+```
+
 ### Verification Commands
 
 ```bash