feat(prometheus): Enable grafana sign in with Keycloak

argocd/prometheus/monitoring/argocd_values.yaml

@@ -15,6 +15,22 @@ kube-prometheus-stack:
     enabled: true
   grafana:
     enabled: true
+    envFromSecret:
+    grafana.ini:
+      auth.generic_oauth:
+        enabled: true
+        name: Keycloak-OAuth
+        allow_sign_up: true
+        client_id: keycloakClientId
+        client_secret: keycloakClientSecret
+        scopes: openid email profile offline_access roles
+        email_attribute_path: email
+        login_attribute_path: username
+        name_attribute_path: full_name
+        auth_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/auth
+        token_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/token
+        api_url: https://id.2martens.de/realms/2martens/protocol/openid-connect/userinfo
+        role_attribute_path: contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || 'Viewer'
     ingress:
       enabled: true
       ingressClassName: public
@@ -59,4 +75,7 @@ kube-prometheus-stack:
       - 10.0.0.7
 storage:
   handles:
-    - "100341703"
+    - "100341703"
+vault:
+  enabled: true
+  applicationName: prometheus