devtools/kubernetes/apps/monitoring/grafana/app/grafana.yaml at f2ab5cddc3ce3e67ad35a7bcf4ecd278e9bd987f · immich-app/devtools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
apiVersion: grafana.integreatly.org/v1beta1
kind: Grafana
metadata:
  name: grafana
  namespace: monitoring
  labels:
    dashboards: "grafana"
spec:
  config:
    server:
      root_url: https://monitoring.immich.cloud/
    database:
      wal: "true"
    auth.generic_oauth:
      enabled: "true"
      client_id: ${quote}${GRAFANA_OAUTH_CLIENT_ID}${quote}
      client_secret: ''
      use_pkce: "true"
      scopes: openid email profile groups offline_access
      auth_url: https://zitadel.internal.immich.cloud/oauth/v2/authorize
      token_url: https://zitadel.internal.immich.cloud/oauth/v2/token
      api_url: https://zitadel.internal.immich.cloud/oidc/v1/userinfo
      role_attribute_path: role
      allow_assign_grafana_admin: "true"
      auto_login: "true"
    users:
      viewers_can_edit: "true"
    rendering:
      server_url: http://grafana-image-renderer:8081/render
      callback_url: http://grafana-service:3000/
    unified_alerting.screenshots:
      capture: "true"
  persistentVolumeClaim:
    spec:
      accessModes:
        - ReadWriteOnce
      resources:
        requests:
          storage: 20Gi
  deployment:
    spec:
      template:
        metadata:
          labels:
            dashboards: grafana
        spec:
          securityContext:
            fsGroup: 472
          volumes:
            - name: grafana-data
              persistentVolumeClaim:
                claimName: grafana-pvc
  ingress:
    metadata:
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-production
    spec:
      ingressClassName: nginx
      rules:
        - host: &host monitoring.immich.cloud
          http:
            paths:
              - backend:
                  service:
                    name: grafana-service
                    port:
                      number: 3000
                path: /
                pathType: Prefix
      tls:
        - hosts:
            - *host
          secretName: grafana-tls-secret