2023-08-13 12:13:53 -05:00
|
|
|
---
|
2023-09-22 20:36:35 -05:00
|
|
|
# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
|
2023-08-13 12:13:53 -05:00
|
|
|
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
|
|
|
|
kind: HelmRelease
|
|
|
|
|
metadata:
|
|
|
|
|
name: grafana
|
|
|
|
|
namespace: monitoring
|
|
|
|
|
spec:
|
|
|
|
|
chart:
|
|
|
|
|
spec:
|
|
|
|
|
chart: grafana
|
|
|
|
|
interval: 30m
|
|
|
|
|
sourceRef:
|
|
|
|
|
kind: HelmRepository
|
|
|
|
|
name: grafana
|
|
|
|
|
namespace: flux-system
|
2023-10-18 12:00:20 -05:00
|
|
|
version: 6.61.1
|
2023-08-13 12:13:53 -05:00
|
|
|
interval: 30m
|
|
|
|
|
timeout: 20m
|
|
|
|
|
maxHistory: 2
|
|
|
|
|
install:
|
|
|
|
|
createNamespace: true
|
|
|
|
|
remediation:
|
|
|
|
|
retries: 3
|
|
|
|
|
upgrade:
|
|
|
|
|
cleanupOnFail: true
|
|
|
|
|
remediation:
|
|
|
|
|
retries: 3
|
|
|
|
|
uninstall:
|
|
|
|
|
keepHistory: false
|
|
|
|
|
values:
|
2023-10-04 14:17:30 -05:00
|
|
|
annotations:
|
|
|
|
|
configmap.reloader.stakater.com/reload: grafana
|
|
|
|
|
secret.reloader.stakater.com/reload: grafana-secrets
|
2023-08-13 12:13:53 -05:00
|
|
|
replicas: 1
|
2023-10-11 13:42:25 -05:00
|
|
|
envFromSecret: grafana-secrets
|
2023-10-10 13:06:16 -05:00
|
|
|
|
|
|
|
|
grafana.ini:
|
|
|
|
|
analytics:
|
|
|
|
|
check_for_updates: false
|
|
|
|
|
check_for_plugin_updates: false
|
|
|
|
|
reporting_enabled: false
|
|
|
|
|
auth:
|
|
|
|
|
oauth_auto_login: true
|
|
|
|
|
oauth_allow_insecure_email_lookup: true
|
2023-10-17 23:56:37 -05:00
|
|
|
signout_redirect_url: https://auth.hsn.dev/application/o/grafana/end-session/
|
2023-10-10 13:06:16 -05:00
|
|
|
auth.basic:
|
|
|
|
|
enabled: false
|
2023-10-20 15:23:39 -05:00
|
|
|
auth.anonymous:
|
|
|
|
|
enabled: false
|
2023-10-10 13:06:16 -05:00
|
|
|
auth.generic_oauth:
|
|
|
|
|
enabled: true
|
|
|
|
|
name: Authentik
|
|
|
|
|
icon: signin
|
|
|
|
|
scopes: openid profile email
|
|
|
|
|
empty_scopes: false
|
2023-10-11 12:36:05 -05:00
|
|
|
login_attribute_path: preferred_username
|
2023-10-10 13:06:16 -05:00
|
|
|
groups_attribute_path: groups
|
|
|
|
|
name_attribute_path: name
|
|
|
|
|
use_pkce: true
|
2023-10-17 23:50:20 -05:00
|
|
|
client_id: CoV7ae1HxuNzwCbVPf3U7TfYMX2rVqC5T9RAUo5M
|
2023-10-10 13:06:16 -05:00
|
|
|
client_secret: # Set by env vars
|
2023-10-17 23:56:37 -05:00
|
|
|
auth_url: https://auth.hsn.dev/application/o/authorize/
|
|
|
|
|
token_url: https://auth.hsn.dev/application/o/token/
|
|
|
|
|
api_url: https://auth.hsn.dev/application/o/userinfo/
|
2023-10-10 13:06:16 -05:00
|
|
|
# map user groups to Grafana roles
|
|
|
|
|
role_attribute_path: |
|
2023-10-10 15:30:51 -05:00
|
|
|
contains(groups[*], 'Grafana Admins') && 'Admin' || contains(groups[*], 'Grafana Editors') && 'Editor' || 'Viewer'
|
2023-10-10 13:06:16 -05:00
|
|
|
date_formats:
|
|
|
|
|
use_browser_locale: true
|
|
|
|
|
explore:
|
|
|
|
|
enabled: true
|
|
|
|
|
news:
|
|
|
|
|
news_feed_enabled: false
|
|
|
|
|
panels:
|
|
|
|
|
disable_sanitize_html: true
|
|
|
|
|
security:
|
|
|
|
|
allow_embedding: true
|
|
|
|
|
cookie_samesite: grafana
|
|
|
|
|
server:
|
|
|
|
|
root_url: https://grafana.valinor.social
|
|
|
|
|
ingress:
|
|
|
|
|
enabled: true
|
2023-10-10 13:11:25 -05:00
|
|
|
annotations:
|
|
|
|
|
external-dns.alpha.kubernetes.io/target: ingress.valinor.social
|
2023-10-10 13:06:16 -05:00
|
|
|
ingressClassName: nginx
|
|
|
|
|
hosts:
|
|
|
|
|
- &host grafana.valinor.social
|
|
|
|
|
tls:
|
|
|
|
|
- hosts:
|
|
|
|
|
- *host
|
|
|
|
|
plugins:
|
|
|
|
|
- natel-discrete-panel
|
|
|
|
|
- pr0ps-trackmap-panel
|
|
|
|
|
- grafana-piechart-panel
|
|
|
|
|
- vonage-status-panel
|
|
|
|
|
- grafana-worldmap-panel
|
|
|
|
|
- grafana-clock-panel
|
