initial commit
Some checks failed
CI Pipeline / Build and Test (push) Successful in 4s
Security Scanning / Trivy — Filesystem & Dependency Scan (push) Failing after 7s
Security Scanning / Gitleaks — Secret Scan (push) Failing after 7s
Security Scanning / Security Summary (push) Failing after 3s
Build and Publish TechDocs / build-and-publish (push) Successful in 1m2s
Some checks failed
CI Pipeline / Build and Test (push) Successful in 4s
Security Scanning / Trivy — Filesystem & Dependency Scan (push) Failing after 7s
Security Scanning / Gitleaks — Secret Scan (push) Failing after 7s
Security Scanning / Security Summary (push) Failing after 3s
Build and Publish TechDocs / build-and-publish (push) Successful in 1m2s
Change-Id: I8e318861a258686ddc53dda08858f74c573a6520
This commit is contained in:
15
chart/examples/default/rendered/grafana/clusterrole.yaml
Normal file
15
chart/examples/default/rendered/grafana/clusterrole.yaml
Normal file
@@ -0,0 +1,15 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/clusterrole.yaml
|
||||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
name: grafana-clusterrole
|
||||
rules:
|
||||
- apiGroups: [""] # "" indicates the core API group
|
||||
resources: ["configmaps", "secrets"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
@@ -0,0 +1,19 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/clusterrolebinding.yaml
|
||||
kind: ClusterRoleBinding
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: grafana-clusterrolebinding
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: grafana
|
||||
namespace: default
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: grafana-clusterrole
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/configmap-dashboard-provider.yaml
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
name: grafana-config-dashboards
|
||||
namespace: default
|
||||
data:
|
||||
provider.yaml: |-
|
||||
apiVersion: 1
|
||||
providers:
|
||||
- name: 'sidecarProvider'
|
||||
orgId: 1
|
||||
folder: ''
|
||||
folderUid: ''
|
||||
type: file
|
||||
disableDeletion: false
|
||||
allowUiUpdates: false
|
||||
updateIntervalSeconds: 30
|
||||
options:
|
||||
foldersFromFilesStructure: false
|
||||
path: /tmp/dashboards
|
||||
39
chart/examples/default/rendered/grafana/configmap.yaml
Normal file
39
chart/examples/default/rendered/grafana/configmap.yaml
Normal file
@@ -0,0 +1,39 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/configmap.yaml
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
data:
|
||||
|
||||
plugins: grafana-opensearch-datasource
|
||||
grafana.ini: |
|
||||
[analytics]
|
||||
check_for_updates = true
|
||||
[auth]
|
||||
disable_login_form = true
|
||||
[auth.anonymous]
|
||||
enabled = true
|
||||
org_name = Main Org.
|
||||
org_role = Admin
|
||||
[grafana_net]
|
||||
url = https://grafana.net
|
||||
[log]
|
||||
mode = console
|
||||
[paths]
|
||||
data = /var/lib/grafana/
|
||||
logs = /var/log/grafana
|
||||
plugins = /var/lib/grafana/plugins
|
||||
provisioning = /etc/grafana/provisioning
|
||||
[server]
|
||||
domain = ''
|
||||
root_url = %(protocol)s://%(domain)s:%(http_port)s/grafana
|
||||
serve_from_sub_path = true
|
||||
[unified_storage]
|
||||
index_path = /var/lib/grafana-search/bleve
|
||||
271
chart/examples/default/rendered/grafana/deployment.yaml
Normal file
271
chart/examples/default/rendered/grafana/deployment.yaml
Normal file
@@ -0,0 +1,271 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/deployment.yaml
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
spec:
|
||||
replicas: 1
|
||||
revisionHistoryLimit: 10
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
strategy:
|
||||
type: RollingUpdate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
annotations:
|
||||
checksum/config: 4bc37edad15da2620fa7b48cb4d0af4ca30f6d344ac238d6aa702abb2d92c6ba
|
||||
checksum/sc-dashboard-provider-config: e70bf6a851099d385178a76de9757bb0bef8299da6d8443602590e44f05fdf24
|
||||
checksum/secret: bed677784356b2af7fb0d87455db21f077853059b594101a4f6532bfbd962a7f
|
||||
kubectl.kubernetes.io/default-container: grafana
|
||||
spec:
|
||||
|
||||
serviceAccountName: grafana
|
||||
automountServiceAccountToken: true
|
||||
shareProcessNamespace: false
|
||||
securityContext:
|
||||
fsGroup: 472
|
||||
runAsGroup: 472
|
||||
runAsNonRoot: true
|
||||
runAsUser: 472
|
||||
enableServiceLinks: true
|
||||
containers:
|
||||
- name: grafana-sc-alerts
|
||||
image: "quay.io/kiwigrid/k8s-sidecar:2.2.1"
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: METHOD
|
||||
value: WATCH
|
||||
- name: LABEL
|
||||
value: "grafana_alert"
|
||||
- name: FOLDER
|
||||
value: "/etc/grafana/provisioning/alerting"
|
||||
- name: RESOURCE
|
||||
value: "both"
|
||||
- name: REQ_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-user
|
||||
- name: REQ_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-password
|
||||
- name: REQ_URL
|
||||
value: http://localhost:3000/api/admin/provisioning/alerting/reload
|
||||
- name: REQ_METHOD
|
||||
value: POST
|
||||
resources:
|
||||
limits:
|
||||
cpu: 100m
|
||||
memory: 100Mi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- name: sc-alerts-volume
|
||||
mountPath: "/etc/grafana/provisioning/alerting"
|
||||
- name: grafana-sc-dashboard
|
||||
image: "quay.io/kiwigrid/k8s-sidecar:2.2.1"
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: METHOD
|
||||
value: WATCH
|
||||
- name: LABEL
|
||||
value: "grafana_dashboard"
|
||||
- name: FOLDER
|
||||
value: "/tmp/dashboards"
|
||||
- name: RESOURCE
|
||||
value: "both"
|
||||
- name: REQ_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-user
|
||||
- name: REQ_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-password
|
||||
- name: REQ_URL
|
||||
value: http://localhost:3000/api/admin/provisioning/dashboards/reload
|
||||
- name: REQ_METHOD
|
||||
value: POST
|
||||
resources:
|
||||
limits:
|
||||
cpu: 100m
|
||||
memory: 100Mi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- name: sc-dashboard-volume
|
||||
mountPath: "/tmp/dashboards"
|
||||
- name: grafana-sc-datasources
|
||||
image: "quay.io/kiwigrid/k8s-sidecar:2.2.1"
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: METHOD
|
||||
value: WATCH
|
||||
- name: LABEL
|
||||
value: "grafana_datasource"
|
||||
- name: FOLDER
|
||||
value: "/etc/grafana/provisioning/datasources"
|
||||
- name: RESOURCE
|
||||
value: "both"
|
||||
- name: REQ_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-user
|
||||
- name: REQ_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-password
|
||||
- name: REQ_URL
|
||||
value: http://localhost:3000/api/admin/provisioning/datasources/reload
|
||||
- name: REQ_METHOD
|
||||
value: POST
|
||||
resources:
|
||||
limits:
|
||||
cpu: 100m
|
||||
memory: 100Mi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- name: sc-datasources-volume
|
||||
mountPath: "/etc/grafana/provisioning/datasources"
|
||||
- name: grafana
|
||||
image: "docker.io/grafana/grafana:12.3.1"
|
||||
imagePullPolicy: IfNotPresent
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- name: config
|
||||
mountPath: "/etc/grafana/grafana.ini"
|
||||
subPath: grafana.ini
|
||||
- name: storage
|
||||
mountPath: "/var/lib/grafana"
|
||||
- name: search
|
||||
mountPath: "/var/lib/grafana-search"
|
||||
- name: sc-alerts-volume
|
||||
mountPath: "/etc/grafana/provisioning/alerting"
|
||||
- name: sc-dashboard-volume
|
||||
mountPath: "/tmp/dashboards"
|
||||
- name: sc-dashboard-provider
|
||||
mountPath: "/etc/grafana/provisioning/dashboards/sc-dashboardproviders.yaml"
|
||||
subPath: provider.yaml
|
||||
- name: sc-datasources-volume
|
||||
mountPath: "/etc/grafana/provisioning/datasources"
|
||||
ports:
|
||||
- name: grafana
|
||||
containerPort: 3000
|
||||
protocol: TCP
|
||||
- name: gossip-tcp
|
||||
containerPort: 9094
|
||||
protocol: TCP
|
||||
- name: gossip-udp
|
||||
containerPort: 9094
|
||||
protocol: UDP
|
||||
- name: profiling
|
||||
containerPort: 6060
|
||||
protocol: TCP
|
||||
env:
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: GF_SECURITY_ADMIN_USER
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-user
|
||||
- name: GF_SECURITY_ADMIN_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: grafana
|
||||
key: admin-password
|
||||
- name: GF_INSTALL_PLUGINS
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
name: grafana
|
||||
key: plugins
|
||||
- name: GF_PATHS_DATA
|
||||
value: /var/lib/grafana/
|
||||
- name: GF_PATHS_LOGS
|
||||
value: /var/log/grafana
|
||||
- name: GF_PATHS_PLUGINS
|
||||
value: /var/lib/grafana/plugins
|
||||
- name: GF_PATHS_PROVISIONING
|
||||
value: /etc/grafana/provisioning
|
||||
- name: GF_UNIFIED_STORAGE_INDEX_PATH
|
||||
value: /var/lib/grafana-search/bleve
|
||||
- name: GOMEMLIMIT
|
||||
valueFrom:
|
||||
resourceFieldRef:
|
||||
divisor: "1"
|
||||
resource: limits.memory
|
||||
livenessProbe:
|
||||
failureThreshold: 10
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: grafana
|
||||
initialDelaySeconds: 60
|
||||
timeoutSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /api/health
|
||||
port: grafana
|
||||
resources:
|
||||
limits:
|
||||
memory: 175Mi
|
||||
volumes:
|
||||
- name: config
|
||||
configMap:
|
||||
name: grafana
|
||||
- name: storage
|
||||
emptyDir: {}
|
||||
- name: search
|
||||
emptyDir: {}
|
||||
- name: sc-alerts-volume
|
||||
emptyDir: {}
|
||||
- name: sc-dashboard-volume
|
||||
emptyDir: {}
|
||||
- name: sc-dashboard-provider
|
||||
configMap:
|
||||
name: grafana-config-dashboards
|
||||
- name: sc-datasources-volume
|
||||
emptyDir: {}
|
||||
13
chart/examples/default/rendered/grafana/role.yaml
Normal file
13
chart/examples/default/rendered/grafana/role.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/role.yaml
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
rules: []
|
||||
20
chart/examples/default/rendered/grafana/rolebinding.yaml
Normal file
20
chart/examples/default/rendered/grafana/rolebinding.yaml
Normal file
@@ -0,0 +1,20 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/rolebinding.yaml
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: grafana
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: grafana
|
||||
namespace: default
|
||||
19
chart/examples/default/rendered/grafana/secret.yaml
Normal file
19
chart/examples/default/rendered/grafana/secret.yaml
Normal file
@@ -0,0 +1,19 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/secret.yaml
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
app.kubernetes.io/component: admin-secret
|
||||
type: Opaque
|
||||
data:
|
||||
|
||||
admin-user: "YWRtaW4="
|
||||
admin-password: "YWRtaW4="
|
||||
ldap-toml: ""
|
||||
22
chart/examples/default/rendered/grafana/service.yaml
Normal file
22
chart/examples/default/rendered/grafana/service.yaml
Normal file
@@ -0,0 +1,22 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/service.yaml
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: grafana
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: service
|
||||
port: 80
|
||||
protocol: TCP
|
||||
targetPort: grafana
|
||||
selector:
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
13
chart/examples/default/rendered/grafana/serviceaccount.yaml
Normal file
13
chart/examples/default/rendered/grafana/serviceaccount.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/grafana/templates/serviceaccount.yaml
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
automountServiceAccountToken: false
|
||||
metadata:
|
||||
labels:
|
||||
helm.sh/chart: grafana-10.5.8
|
||||
app.kubernetes.io/name: grafana
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "12.3.1"
|
||||
name: grafana
|
||||
namespace: default
|
||||
Reference in New Issue
Block a user