scottk/Biohazard
1
0
Fork 0
mirror of https://github.com/outbackdingo/Biohazard.git synced 2026-03-22 01:39:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: cleanup

Browse Source
This commit is contained in:
JJGadgets
2025-04-15 21:12:34 +08:00
parent 21a3b80852
commit e3d07f02f8
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
kube/deploy/core/monitoring/grafana/app/hr.yaml
View File

@@ -55,12 +55,12 @@ spec:
role_attribute_path: |
contains(groups[*], 'Role-Grafana-Admin') && 'GrafanaAdmin' || contains(groups[*], 'Role-Grafana-Viewer') && 'Viewer'
auth.proxy: # if Tailscale headers exist, it'll be used first, else use OIDC
enabled: true
auto_sign_up: true
whitelist: "${IP_POD_CIDR_V4}"
header_name: Tailscale-User-Login # email is immutable to account for Tailscale, used for person identity
header_property: username
headers: "Name:Tailscale-User-Name Email:Tailscale-User-Login"
enabled: false
# auto_sign_up: true
# whitelist: "${IP_POD_CIDR_V4:=127.0.0.1/32}"
# header_name: Tailscale-User-Login # email is immutable to account for Tailscale, used for person identity
# header_property: username
# headers: "Name:Tailscale-User-Name Email:Tailscale-User-Login"
# defaults to viewer role, privileged access needs OIDC
auth.basic:
enabled: false
@@ -380,7 +380,7 @@ spec:
ingress:
enabled: true
ingressClassName: "nginx-internal"
hosts: &host ["${APP_DNS_GRAFANA}"]
hosts: &host ["${APP_DNS_GRAFANA:=grafana}"]
tls: [hosts: *host]
persistence:
enabled: false