mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 06:19:33 +01:00
b6016d0a26
* Example manifests aim to provide a read-only dashboard visible to any users with network access (i.e. kubectl port-forward, LAN) * Problem: Grafana always has an admin user, even with the user management system disabled * Disable the login form to prevent admin login
67 lines
1.8 KiB
YAML
67 lines
1.8 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: grafana
|
|
namespace: monitoring
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
selector:
|
|
matchLabels:
|
|
name: grafana
|
|
phase: prod
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: grafana
|
|
phase: prod
|
|
annotations:
|
|
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
|
|
spec:
|
|
containers:
|
|
- name: grafana
|
|
image: grafana/grafana:5.3.4
|
|
env:
|
|
- name: GF_SERVER_HTTP_PORT
|
|
value: "8080"
|
|
- name: GF_AUTH_BASIC_ENABLED
|
|
value: "false"
|
|
- name: GF_AUTH_DISABLE_LOGIN_FORM
|
|
value: "true"
|
|
- name: GF_AUTH_ANONYMOUS_ENABLED
|
|
value: "true"
|
|
- name: GF_AUTH_ANONYMOUS_ORG_ROLE
|
|
value: Viewer
|
|
- name: GF_ANALYTICS_REPORTING_ENABLED
|
|
value: "false"
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
resources:
|
|
requests:
|
|
memory: 100Mi
|
|
cpu: 100m
|
|
limits:
|
|
memory: 200Mi
|
|
cpu: 200m
|
|
volumeMounts:
|
|
- name: datasources
|
|
mountPath: /etc/grafana/provisioning/datasources
|
|
- name: dashboard-providers
|
|
mountPath: /etc/grafana/provisioning/dashboards
|
|
- name: dashboards
|
|
mountPath: /var/lib/grafana/dashboards
|
|
volumes:
|
|
- name: datasources
|
|
configMap:
|
|
name: grafana-datasources
|
|
- name: dashboard-providers
|
|
configMap:
|
|
name: grafana-dashboard-providers
|
|
- name: dashboards
|
|
configMap:
|
|
name: grafana-dashboards
|