Enhanced grafana yaml

This commit is contained in:
Richard Robert Reitz 2025-03-02 10:47:25 +01:00
parent 0f8282ead6
commit ce6c51eea9

View file

@ -30,11 +30,10 @@ grafana:
grafana.ini: grafana.ini:
server: server:
domain: factory-172-18-0-2.traefik.me domain: {{{ .Env.DOMAIN }}}
root_url: "%(protocol)s://%(domain)s/grafana" root_url: "%(protocol)s://%(domain)s/grafana"
serve_from_sub_path: true serve_from_sub_path: true
auth: auth:
oauth_allow_insecure_email_lookup: true
disable_login: true disable_login: true
disable_login_form: true disable_login_form: true
auth.generic_oauth: auth.generic_oauth:
@ -47,12 +46,11 @@ grafana:
email_attribute_path: email email_attribute_path: email
login_attribute_path: username login_attribute_path: username
name_attribute_path: full_name name_attribute_path: full_name
tls_skip_verify_insecure: true auth_url: https://{{{ .Env.DOMAIN }}}/keycloak/realms/cnoe/protocol/openid-connect/auth
auth_url: https://factory-172-18-0-2.traefik.me/keycloak/realms/cnoe/protocol/openid-connect/auth token_url: https://{{{ .Env.DOMAIN }}}/keycloak/realms/cnoe/protocol/openid-connect/token
token_url: https://factory-172-18-0-2.traefik.me/keycloak/realms/cnoe/protocol/openid-connect/token api_url: https://{{{ .Env.DOMAIN }}}/keycloak/realms/cnoe/protocol/openid-connect/userinfo
api_url: https://factory-172-18-0-2.traefik.me/keycloak/realms/cnoe/protocol/openid-connect/userinfo redirect_uri: http://{{{ .Env.DOMAIN }}}/grafana/login/generic_oauth
redirect_uri: http://factory-172-18-0-2.traefik.me/grafana/login/generic_oauth role_attribute_path: "contains(resource_access.\"grafana-oauth\".roles[*], 'admin') && 'Admin' || contains(resource_access.\"grafana-oauth\".roles[*], 'editor') && 'Editor' || 'Viewer'"
role_attribute_path: contains(roles[*], 'admin') && 'Admin' || contains(roles[*], 'editor') && 'Editor' || 'Viewer'
extraSecretMounts: extraSecretMounts:
- name: auth-generic-oauth-secret-mount - name: auth-generic-oauth-secret-mount