openstack-helm-infra/values_overrides/grafana/tls.yaml
Vladimir Kozhukalov 8b29037cec Move values overrides to a separate directory
This is the action item to implement the spec:
doc/source/specs/2025.1/chart_versioning.rst

Also add overrides env variables

- OSH_VALUES_OVERRIDES_PATH
- OSH_INFRA_VALUES_OVERRIDES_PATH

This commit temporarily disables all jobs that involve scripts
in the OSH git repo because they need to be updated to work
with the new values_overrides structure in the OSH-infra repo.
Once this is merged I4974785c904cf7c8730279854e3ad9b6b7c35498
all these disabled test jobs must be enabled.

Depends-On: I327103c18fc0e10e989a17f69b3bff9995c45eb4
Change-Id: I7bfdef3ea2128bbb4e26e3a00161fe30ce29b8e7
2024-12-13 12:04:44 -06:00

40 lines
1.1 KiB
YAML

---
conf:
grafana:
database:
ssl_mode: true
ca_cert_path: /etc/mysql/certs/ca.crt
client_key_path: /etc/mysql/certs/tls.key
client_cert_path: /etc/mysql/certs/tls.crt
provisioning:
datasources:
template: |
{{ $prom_host := tuple "monitoring" "internal" . | include "helm-toolkit.endpoints.hostname_fqdn_endpoint_lookup" }}
{{ $prom_uri := printf "https://%s" $prom_host }}
apiVersion: 1
datasources:
- name: prometheus
type: prometheus
access: proxy
orgId: 1
editable: true
basicAuth: true
basicAuthUser: {{ .Values.endpoints.monitoring.auth.user.username }}
jsonData:
tlsAuthWithCACert: true
secureJsonData:
basicAuthPassword: {{ .Values.endpoints.monitoring.auth.user.password }}
tlsCACert: $CACERT
url: {{ $prom_uri }}
endpoints:
grafana:
host_fqdn_override:
default:
tls:
issuerRef:
name: ca-issuer
kind: ClusterIssuer
manifests:
certificates: true
...