Commit 28896d88 authored by kaiyou's avatar kaiyou
Browse files

Enable Grafana OAuth

parent d228bf92
......@@ -52,6 +52,15 @@ spec:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-http
grafana:
env:
GF_ANALYTICS_REPORTING_ENABLED: false
GF_EXPLORE_ENABLED: true
GF_AUTH_DISABLE_LOGIN_FORM: true
GF_AUTH_OAUTH_AUTO_LOGIN: true
GF_AUTH_GENERIC_OAUTH_ENABLED: true
GF_AUTH_GENERIC_ALLOW_SIGN_UP: true
GF_AUTH_GENERIC_OAUTH_SCOPES: "openid profile email"
envFromSecret: grafana-oauth
persistence:
enabled: true
storageClassName: local-path
......@@ -74,5 +83,45 @@ spec:
enabled: false
kubeProxy:
enabled: false
---
apiVersion: v1
kind: Secret
metadata:
name: grafana-oauth
type: Opaque
stringData:
GF_AUTH_GENERIC_OAUTH_CLIENT_ID: ENC[AES256_GCM,data:WK51OL3ckrva1Pc87/19A0Ts9JYuXJ07,iv:jYp6DRwD8fb5ITVaXvv9Z0BZaMTn/de+FLdTt6jzR00=,tag:Bl7jElEZeFNhITWI8wESvQ==,type:str]
GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: ENC[AES256_GCM,data:ro7mCt8rlnojVK58uCLo+BTqaDPcDmWWhs9/DCPra0u3ttcUA9IZSfr0G1dhs4Dc,iv:PCy5PcWl2VG3sITfIrABiFluaWg1UqBHNhncwaHO2m8=,tag:UljOC8GhLEhuSewUaU79Rw==,type:str]
GF_AUTH_GENERIC_OAUTH_AUTH_URL: ENC[AES256_GCM,data:ppGZ0Tymqlail6b82T/dlU025S6cjwsKYJa4zgv7eoPpmXR5nMRJqL96gzz/0JKktv1M9FQA2N+XFufTmn52n/tDAbTuQLTkHyNG9yX4mcw=,iv:nlt5CTW6Mt+WQoMlDuDxqiC/kS3hsEg6awntugTTFMM=,tag:k35ZURZkerAj5zPvGxhTkA==,type:str]
GF_AUTH_GENERIC_OAUTH_TOKEN_URL: ENC[AES256_GCM,data:zuHBpMrTWhsRONqJqACRUVEKqC5YZp4B1L9QwmG0L5uzwXWjSnUloYBZWKOUhHDTE45TZLfGGH2QIM+aqJP1XyR/0ziDW6aprWRJlQ==,iv:7iW6XKHVeTWiAKfSlAgH/sRhJ0ioevQHxT3XW+7MBfI=,tag:FQ/hk5P15KFPMwRqQcw5xQ==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: []
lastmodified: "2021-04-21T06:46:37Z"
mac: ENC[AES256_GCM,data:5lF3W56ZJxiR8UczEK2W7O06qQrvJruil3BHnTr+ZutHjg4TpoXHBmsfzReoCbu3Zrx50Igt4JSXGLfXbuPqNyRnpcV5pz4E7rgkCLyCoPPy3vE3vNXW5UZ2Ywmy4L1L1YiyTB6B/X8dY/HaOTPn0ROUVJZ8I2pXAWBMCWCSrqY=,iv:RsUOl+QSB1vA9Q7E5J3Gk17sMapWn9nZkOkA1msmAIc=,tag:JOGnKdsW5hG/ltq4iVVk7g==,type:str]
pgp:
- created_at: "2021-04-21T06:46:37Z"
enc: |
-----BEGIN PGP MESSAGE-----
\ No newline at end of file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=iPZM
-----END PGP MESSAGE-----
fp: F70B0EDDA992FC1725F0CD6333D855CA20D4B367
encrypted_regex: ^(data|stringData)$
version: 3.7.0
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment