Automated upload for observability.buildth.ing

otc/observability.buildth.ing/stacks/observability/grafana-operator/manifests/grafana.yaml

@@ -8,7 +8,7 @@ spec:
   persistentVolumeClaim:
     metadata:
       annotations:
-        everest.io/disk-volume-type: SATA
+        everest.io/disk-volume-type: GPSSD
         everest.io/crypt-key-id: c02a26f1-3c7e-486d-ba5a-266c321bb203
     spec:
       storageClassName: csi-disk
@@ -17,6 +17,40 @@ spec:
       resources:
         requests:
           storage: 10Gi
+  deployment:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: grafana
+              env:
+                - name: OAUTH_CLIENT_SECRET
+                  valueFrom:
+                    secretKeyRef:
+                      key: clientSecret
+                      name: dex-grafana-client
+  config:
+    log.console:
+      level: debug
+    server:
+      root_url: "https://grafana.observability.buildth.ing"
+    auth:
+      disable_login: "true"
+      disable_login_form: "true"
+    auth.generic_oauth:
+      enabled: "true"
+      name: Forgejo
+      allow_sign_up: "true"
+      use_refresh_token: "true"
+      client_id: grafana
+      client_secret: $__env{OAUTH_CLIENT_SECRET}
+      scopes: openid email profile offline_access groups
+      auth_url: https://dex.observability.buildth.ing/auth
+      token_url: https://dex.observability.buildth.ing/token
+      api_url: https://dex.observability.buildth.ing/userinfo
+      redirect_uri: https://grafana.observability.buildth.ing/login/generic_oauth
+      role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin' || 'None'"
+      allow_assign_grafana_admin: "true"
   ingress:
     metadata:
       annotations: