ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  tls:
  - secretName: grafana-tls
    hosts:
    - grafana.forteapps.net

resources:
  requests:
    cpu: 50m
    memory: 128Mi
  limits:
    cpu: 100m
    memory: 256Mi

adminUser: admin
adminPassword: "forte"

envFromSecrets:
- name: grafana-oidc-credentials

grafana.ini:
  server:
    root_url: https://grafana.forteapps.net
  auth.generic_oauth:
    enabled: true
    name: Forte SSO
    allow_sign_up: true
    client_id: ${client-id}
    client_secret: ${client-secret}
    scopes: openid email profile
    auth_url: https://id.forteapps.net/realms/forte/protocol/openid-connect/auth
    token_url: https://id.forteapps.net/realms/forte/protocol/openid-connect/token
    api_url: https://id.forteapps.net/realms/forte/protocol/openid-connect/userinfo
    role_attribute_path: "contains(resource_access.grafana.roles[*], 'Admin') && 'Admin' || contains(resource_access.grafana.roles[*], 'Editor') && 'Editor' || 'Viewer'"
    role_attribute_strict: true
    allow_assign_grafana_admin: true
    auto_login: true
  auth:
    disable_login_form: true

datasources:
  datasources.yaml:
    apiVersion: 1
    datasources:
    - name: Prometheus
      type: prometheus
      url: http://prometheus-server.monitoring.svc.cluster.local
      access: proxy
      isDefault: true
    - name: Loki
      type: loki
      uid: loki
      url: http://loki-gateway.monitoring.svc.cluster.local
      access: proxy
    - name: Tempo
      type: tempo
      uid: tempo
      url: http://tempo.monitoring.svc.cluster.local:3200
      access: proxy
      jsonData:
        tracesToLogsV2:
          datasourceUid: loki
          tags:
          - key: namespace
          - key: pod
          - key: container
        tracesToMetrics:
          datasourceUid: Prometheus
          tags:
          - key: service.name
            value: service
        nodeGraph:
          enabled: true
        serviceMap:
          datasourceUid: Prometheus

sidecar:
  dashboards:
    enabled: true
    label: grafana_dashboard
    labelValue: "1"
    folder: /tmp/dashboards
    provider:
      foldersFromFilesStructure: false

dashboardProviders:
  dashboardproviders.yaml:
    apiVersion: 1
    providers:
    - name: 'default'
      orgId: 1
      folder: ''
      type: file
      disableDeletion: false
      editable: true
      options:
        path: /var/lib/grafana/dashboards/default
dashboards:
  default:
    kubernetes:
      gnetId: 15758
      revision: 1
      datasource: Prometheus