From 62e3a61448afecf49836406ad44502fdcc43aad1 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Thu, 5 Sep 2024 08:02:47 +0200 Subject: [PATCH] feat(prometheus): Enable grafana sign in with Keycloak --- .../prometheus/monitoring/argocd_values.yaml | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/argocd/prometheus/monitoring/argocd_values.yaml b/argocd/prometheus/monitoring/argocd_values.yaml index 48e326d..61800de 100644 --- a/argocd/prometheus/monitoring/argocd_values.yaml +++ b/argocd/prometheus/monitoring/argocd_values.yaml @@ -15,6 +15,22 @@ kube-prometheus-stack: enabled: true grafana: enabled: true + envFromSecret: + grafana.ini: + auth.generic_oauth: + enabled: true + name: Keycloak-OAuth + allow_sign_up: true + client_id: keycloakClientId + client_secret: keycloakClientSecret + scopes: openid email profile offline_access roles + email_attribute_path: email + login_attribute_path: username + name_attribute_path: full_name + auth_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/auth + token_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/token + api_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/userinfo + role_attribute_path: contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || 'Viewer' ingress: enabled: true ingressClassName: public @@ -59,4 +75,7 @@ kube-prometheus-stack: - 10.0.0.7 storage: handles: - - "100341703" \ No newline at end of file + - "100341703" +vault: + enabled: true + applicationName: prometheus