grafana:
  enabled: true

  hostAliases:
    - ip: "13.140.150.2"
      hostnames:
        - "keycloak.13.140.150.2.nip.io"

  extraSecretMounts:
    - name: grafana-oauth-secret
      secretName: grafana-oauth-secret
      mountPath: /etc/secrets
      readOnly: true

  grafana.ini:
    server:
      root_url: http://grafana.13.140.150.2.nip.io

    security:
      secret_key: $__file{/etc/secrets/GF_SECURITY_SECRET_KEY}

    auth:
      disable_login_form: true

    auth.generic_oauth:
      enabled: true
      name: Keycloak
      allow_sign_up: true
      client_id: grafana
      client_secret: $__file{/etc/secrets/GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET}
      scopes: openid email profile
      auth_url: http://keycloak.13.140.150.2.nip.io/auth/realms/k8s-apps/protocol/openid-connect/auth
      token_url: http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token
      api_url: http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/userinfo
      email_attribute_path: email
      login_attribute_path: preferred_username

  ingress:
    enabled: true
    annotations:
      nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
      nginx.ingress.kubernetes.io/ssl-redirect: "false"
    ingressClassName: nginx
    hosts:
      - grafana.13.140.150.2.nip.io

prometheus:
  enabled: true
  prometheusSpec:
    serviceMonitorSelectorNilUsesHelmValues: false
    podMonitorSelectorNilUsesHelmValues: false

alertmanager:
  enabled: true