Dreaded_X
e893fa1b1f
Some checks failed
kustomization/promtail/3a682516 dependency not ready
kustomization/cert-manager/3a682516 reconciliation succeeded
kustomization/rook-ceph/3a682516 reconciliation succeeded
kustomization/rook-ceph-cluster/3a682516 reconciliation succeeded
kustomization/akri/3a682516 reconciliation succeeded
kustomization/kyverno/3a682516 reconciliation succeeded
kustomization/node-feature-discovery-rules/3a682516 reconciliation succeeded
kustomization/velero/3a682516 reconciliation succeeded
kustomization/node-feature-discovery/3a682516 reconciliation succeeded
kustomization/flux-system/3a682516 reconciliation succeeded
kustomization/topolvm/3a682516 reconciliation succeeded
kustomization/letsencrypt/3a682516 reconciliation succeeded
kustomization/kyverno-policies/3a682516 reconciliation succeeded
kustomization/kube-vip/3a682516 reconciliation succeeded
kustomization/cnpg/3a682516 reconciliation succeeded
kustomization/traefik/3a682516 reconciliation succeeded
kustomization/lldap/3a682516 reconciliation succeeded
kustomization/authelia/3a682516 reconciliation succeeded
kustomization/traefik-middleware/3a682516 reconciliation succeeded
kustomization/apps/3a682516 reconciliation succeeded
kustomization/loki/3a682516 health check failed
80 lines
1.9 KiB
YAML
80 lines
1.9 KiB
YAML
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: grafana
|
|
spec:
|
|
chart:
|
|
spec:
|
|
chart: grafana
|
|
reconcileStrategy: ChartVersion
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: grafana
|
|
version: 8.8.2
|
|
interval: 15m
|
|
values:
|
|
replicas: 2
|
|
|
|
ingress:
|
|
enabled: true
|
|
hosts:
|
|
- grafana.${domain}
|
|
tls:
|
|
- secretName: ${domain//./-}-tls
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entryPoints: "websecure"
|
|
traefik.ingress.kubernetes.io/router.middlewares: "authelia-forwardauth-authelia@kubernetescrd"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
|
|
envValueFrom:
|
|
BIND_DN:
|
|
secretKeyRef:
|
|
name: grafana-lldap-credentials
|
|
key: bind_dn
|
|
LDAP_PASSWORD:
|
|
secretKeyRef:
|
|
name: grafana-lldap-credentials
|
|
key: password
|
|
|
|
grafana.ini:
|
|
auth.ldap:
|
|
enabled: true
|
|
|
|
auth.proxy:
|
|
enabled: true
|
|
header_name: Remote-User
|
|
header_property: username
|
|
auto_sign_up: true
|
|
headers: Groups:Remote-Group
|
|
enable_login_token: false
|
|
sync_ttl: 0
|
|
signout_redirect_url: https://login.${domain}/logout?rd=https://grafana.${domain}
|
|
|
|
database:
|
|
type: postgres
|
|
host: $__file{/etc/secrets/db/host}
|
|
name: $__file{/etc/secrets/db/dbname}
|
|
user: $__file{/etc/secrets/db/user}
|
|
password: $__file{/etc/secrets/db/password}
|
|
|
|
remote_cache:
|
|
type: redis
|
|
connstr: addr=dragonflydb.grafana:6379
|
|
|
|
ldap:
|
|
enabled: true
|
|
existingSecret: grafana-ldap-toml
|
|
|
|
sidecar:
|
|
datasources:
|
|
enabled: true
|
|
searchNamespace: ALL
|
|
labelValue: "1"
|
|
|
|
extraSecretMounts:
|
|
- name: postgres-app-mount
|
|
secretName: postgres-app
|
|
defaultMode: 0440
|
|
mountPath: /etc/secrets/db
|
|
readOnly: true
|