Files
homelab-infrastructure/ansible/roles/kubernetes_prometheus/defaults/main.yaml
T

52 lines
1.4 KiB
YAML

prometheus_chart_version: 86.3.2
prometheus_values:
grafana:
enabled: true
adminPassword: password
envFromSecrets:
- name: grafana-oidc-secret
ingress:
enabled: true
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt
hosts:
- grafana.solidish.dev
tls:
- secretName: grafana-solidish-dev-tls
hosts:
- grafana.solidish.dev
grafana.ini:
server:
root_url: https://grafana.solidish.dev
auth.generic_oauth:
enabled: true
name: Authentik
client_id: $__env{GRAFANA_OIDC_CLIENT_ID}
client_secret: $__env{GRAFANA_OIDC_CLIENT_SECRET}
scopes: openid profile email
auth_url: https://auth.solidish.dev/application/o/authorize/
token_url: https://auth.solidish.dev/application/o/token/
api_url: https://auth.solidish.dev/application/o/userinfo/
role_attribute_path: contains(groups, 'admin') && 'Admin' || 'Viewer'
allow_assign_grafana_admin: true
alertmanager:
enabled: false
prometheus:
prometheusSpec:
retention: 30d
storageSpec:
volumeClaimTemplate:
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 10Gi
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
memory: 2Gi