54 lines
1.5 KiB
YAML
54 lines
1.5 KiB
YAML
grafana:
|
|
enabled: true
|
|
|
|
hostAliases:
|
|
- ip: "13.140.150.2"
|
|
hostnames:
|
|
- "keycloak.13.140.150.2.nip.io"
|
|
|
|
extraSecretMounts:
|
|
- name: grafana-oauth-secret
|
|
secretName: grafana-oauth-secret
|
|
mountPath: /etc/secrets
|
|
readOnly: true
|
|
|
|
grafana.ini:
|
|
server:
|
|
root_url: http://grafana.13.140.150.2.nip.io
|
|
|
|
security:
|
|
secret_key: $__file{/etc/secrets/GF_SECURITY_SECRET_KEY}
|
|
|
|
auth:
|
|
disable_login_form: true
|
|
|
|
auth.generic_oauth:
|
|
enabled: true
|
|
name: Keycloak
|
|
allow_sign_up: true
|
|
client_id: grafana
|
|
client_secret: $__file{/etc/secrets/GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET}
|
|
scopes: openid email profile
|
|
auth_url: http://keycloak.13.140.150.2.nip.io/auth/realms/k8s-apps/protocol/openid-connect/auth
|
|
token_url: http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token
|
|
api_url: http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/userinfo
|
|
email_attribute_path: email
|
|
login_attribute_path: preferred_username
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "false"
|
|
ingressClassName: nginx
|
|
hosts:
|
|
- grafana.13.140.150.2.nip.io
|
|
|
|
prometheus:
|
|
enabled: true
|
|
prometheusSpec:
|
|
serviceMonitorSelectorNilUsesHelmValues: false
|
|
podMonitorSelectorNilUsesHelmValues: false
|
|
|
|
alertmanager:
|
|
enabled: true |