feat(helm): added observability to helm chart

2026-05-23 01:11:38 +03:00
parent f3754d1190
commit 5fcaeadcaf
11 changed files with 2516 additions and 4 deletions
@@ -0,0 +1,79 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: grafana
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: oci://ghcr.io/grafana-community/helm-charts/grafana
+    path: .
+    targetRevision: 12.3.0
+    helm:
+      valuesObject:
+        envValueFrom:
+          GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET:
+            secretKeyRef:
+              name: grafana-secrets
+              key: client-secret
+
+        grafana.ini:
+          server:
+            root_url: https://grafana.internal.itqdev.xyz
+
+          auth:
+            disable_login_form: false
+            oauth_auto_login: false
+
+          auth.generic_oauth:
+            enabled: true
+            name: Keycloak
+            allow_sign_up: true
+            client_id: grafana-private
+            client_secret: ${GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET}
+            scopes: openid profile email
+            use_pkce: true
+
+            auth_url: https://id.itqdev.xyz/realms/master/protocol/openid-connect/auth
+            token_url: https://id.itqdev.xyz/realms/master/protocol/openid-connect/token
+            api_url: https://id.itqdev.xyz/realms/master/protocol/openid-connect/userinfo
+
+            role_attribute_path: >
+              contains(groups[*], 'admin') && 'Admin' ||
+              contains(groups[*], 'editor') && 'Editor' ||
+              'Viewer'
+            role_attribute_strict: false
+
+            use_refresh_token: true
+            id_token_attribute_name: preferred_username
+
+        sidecar:
+          dashboards:
+            enabled: true
+            label: grafana_dashboard
+            labelValue: "1"
+            searchNamespace: ALL
+            folderAnnotation: grafana_folder
+            provider:
+              folder: MovieNight
+              allowUiUpdates: false
+          datasources:
+            enabled: true
+            label: grafana_datasource
+            labelValue: "1"
+            searchNamespace: ALL
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: grafana
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+      enabled: true
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      - ServerSideApply=true