apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: grafana
spec:
  chart:
    spec:
      chart: grafana
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        name: grafana
      version: 8.8.2
  interval: 15m
  values:
    replicas: 2

    ingress:
      enabled: true
      hosts:
        - grafana.${domain}
      tls:
        - secretName: ${domain//./-}-tls

    envValueFrom:
      LDAP_ADMIN_PASSWORD:
        secretKeyRef:
          name: grafana-lldap
          key: password

    grafana.ini:
      auth.ldap:
        enabled: true

      database:
        type: postgres
        host: $__file{/etc/secrets/db/host}
        name: $__file{/etc/secrets/db/dbname}
        user: $__file{/etc/secrets/db/user}
        password: $__file{/etc/secrets/db/password}

      remote_cache:
        type: redis
        connstr: addr=dragonflydb.grafana:6379

    ldap:
      enabled: true
      existingSecret: grafana-ldap-toml

    extraSecretMounts:
      - name: grafana-db-cluster-app-mount
        secretName: grafana-db-cluster-app
        defaultMode: 0440
        mountPath: /etc/secrets/db
        readOnly: true