95c5d71222
## Why Deploys Grafana in-cluster (observability project) via the grafana-operator, mirroring the puppet Grafana but modernised — **CNPG** for state, **Authentik OIDC** for auth — and ports the live datasource + dashboards in as CRs. Depends on: grafana-operator (#235, merged), grafana schemas (#236, merged), Authentik OIDC (terraform-authentik #2), Vault seeds (done), and `^grafana/` image proxy (terraform-artifactapi #5). ## Changes (`apps/base/grafana`) - **CNPG** postgres Cluster + rw Pooler (db `grafana`); **VaultAuth** + **VaultStaticSecrets** pulling `postgres`/`oauth` credentials from `kv/kubernetes/namespace/grafana/default/*`. - **Grafana CR**: postgres backend via the pooler; Authentik `generic_oauth` (client id/secret from the Vault-synced secret, openid/email/profile scopes, group→role mapping); `root_url` grafana.k8s.syd1.au.unkin.net. - **1 GrafanaDatasource** — k8s VictoriaMetrics via the operator `vmselect-main` service; reuses the previous default datasource uid so the imported dashboards resolve unedited. - **13 GrafanaDashboards** (gzipJson) exported from the current grafana. - **Gateway API** (traefik-internal) + HTTPRoute for grafana.k8s.syd1.au.unkin.net. - Registered in the observability ApplicationSet + project. ## Review notes - OAuth `role_attribute_path` maps Authentik group `grafana-admins` → Admin, else Viewer — **confirm the group name**. - `database.ssl_mode: require` against the CNPG pooler — adjust if the pooler isn't serving TLS. - The `VictoriaLogs - cluster` dashboard has no in-cluster logs datasource yet (no VictoriaLogs in k8s) — included for completeness, will be empty until one exists. - `make kubeconform` clean (24 resources, validated against the strict grafana schemas). Reviewed-on: #238 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>
14 lines
8.2 KiB
YAML
14 lines
8.2 KiB
YAML
---
|
|
apiVersion: grafana.integreatly.org/v1beta1
|
|
kind: GrafanaDashboard
|
|
metadata:
|
|
name: victorialogs-cluster
|
|
namespace: grafana
|
|
spec:
|
|
instanceSelector:
|
|
matchLabels:
|
|
dashboards: "grafana"
|
|
resyncPeriod: 5m
|
|
allowCrossNamespaceImport: false
|
|
gzipJson: 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
|