From eb5d3d690a909ea82e8d3aed48f74e8bf1ad89fc Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Mon, 15 Apr 2024 21:53:24 +0800
Subject: [PATCH] fix(grafana): change authentik allow

---
 kube/deploy/core/monitoring/grafana/app/hr.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/kube/deploy/core/monitoring/grafana/app/hr.yaml b/kube/deploy/core/monitoring/grafana/app/hr.yaml
index 07e415e9..18bd45af 100644
--- a/kube/deploy/core/monitoring/grafana/app/hr.yaml
+++ b/kube/deploy/core/monitoring/grafana/app/hr.yaml
@@ -17,8 +17,11 @@ spec:
   values: # TODO: separate Grafana's actual configs like dashboards (leave deployment config) into its own configMap and use valuesFrom
     replicas: 1 # OIDC needs specific session, thus 1 replica
     podLabels:
-      egress.home.arpa/nginx-external: "allow" # authentik
       tailscale.com/expose: "true"
+      authentik.home.arpa/https: "allow"
+    hostAliases:
+      - ip: "${APP_IP_AUTHENTIK}"
+        hostnames: ["${APP_DNS_AUTHENTIK}"]
     env:
       GF_EXPLORE_ENABLED: true
       GF_LOG_MODE: console
@@ -214,7 +217,7 @@ spec:
           datasource:
             - { name: DS_PROMETHEUS, value: Prometheus }
         windows-node-jakub-pinkas:
-          gnetId: 
+          gnetId:
           revision: 3
           datasource: Prometheus
     sidecar: