feat(prometheus): Enable grafana sign in with Keycloak

This commit is contained in:
2024-09-05 08:02:47 +02:00
parent 34fb364934
commit 62e3a61448
@@ -15,6 +15,22 @@ kube-prometheus-stack:
enabled: true
grafana:
enabled: true
envFromSecret:
grafana.ini:
auth.generic_oauth:
enabled: true
name: Keycloak-OAuth
allow_sign_up: true
client_id: keycloakClientId
client_secret: keycloakClientSecret
scopes: openid email profile offline_access roles
email_attribute_path: email
login_attribute_path: username
name_attribute_path: full_name
auth_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/auth
token_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/token
api_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/userinfo
role_attribute_path: contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || 'Viewer'
ingress:
enabled: true
ingressClassName: public
@@ -59,4 +75,7 @@ kube-prometheus-stack:
- 10.0.0.7
storage:
handles:
- "100341703"
- "100341703"
vault:
enabled: true
applicationName: prometheus