Files
homelab-v/k8s/infra/monitoring/grafana/grafana.yaml
T
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
c9d054231e chore(deps): renovate 2025-10-25
chore(deps): update netbird (#408)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#411)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v9 (#412)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v77.14.0 (#410)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.13 (#407)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.68 (#404)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#401)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker/login-action action to v3.6.0 (#403)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release node-feature-discovery to v0.18.2 (#409)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/grafana/grafana docker tag to v12.2.1 (#414)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/lidarr docker tag to v3 (#425)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v78 (#426)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cert-manager to v1.19.1 (#424)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.47 (#415)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.26.1 (#416)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update proxmox-csi-plugin docker tag to v0.3.16 (#417)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.10.0 (#418)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update grafana-operator docker tag to v5.20.0 (#423)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.30.0 (#422)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-25 15:13:54 +02:00

52 lines
1.8 KiB
YAML

apiVersion: grafana.integreatly.org/v1beta1
kind: Grafana
metadata:
name: grafana
namespace: grafana
labels:
app: grafana
spec:
disableDefaultAdminSecret: true
config:
log:
mode: console
auth:
disable_login_form: "true"
server:
root_url: https://grafana.stonegarden.dev
auth.generic_oauth:
enabled: "true"
name: Authelia
client_id: $__env{OIDC_CLIENT_ID}
client_secret: $__env{OIDC_CLIENT_SECRET}
auth_style: InHeader
scopes: openid email profile offline_access grafana
empty_scopes: "false"
use_pkce: "true"
use_refresh_token: "true"
auth_url: https://authelia.stonegarden.dev/api/oidc/authorization
token_url: https://authelia.stonegarden.dev/api/oidc/token
api_url: https://authelia.stonegarden.dev/api/oidc/userinfo
signout_redirect_url: https://authelia.stonegarden.dev/logout
login_attribute_path: preferred_username
name_attribute_path: name
allow_assign_grafana_admin: "true"
role_attribute_path: contains(grafana[*], 'grafana_admin') && 'GrafanaAdmin' || contains(grafana[*], 'admin') && 'Admin' || contains(grafana[*], 'editor') && 'Editor' || 'Viewer'
auto_login: "true"
version: 12.2.1 # renovate: docker=docker.io/grafana/grafana
deployment:
spec:
template:
spec:
containers:
- name: grafana
env:
- name: GF_SECURITY_ADMIN_USER
valueFrom:
secretKeyRef: { key: username, name: admin-credentials }
- name: GF_SECURITY_ADMIN_PASSWORD
valueFrom:
secretKeyRef: { key: password, name: admin-credentials }
envFrom:
- secretRef: { name: oidc-credentials }