Grafana

Note

This deployment makes a few assumption:

assumes you are using OAuth using Azure
assumes you are using tls/ssl
assumes you are using ingress

If this does not apply to your deployment adjust the overrides.yaml file and skip over any unneeded sections here

Create secret client file

In order to avoid putting sensative information on the cli, it is recommended to create and use a secret file instead.

You can base64 encode your client_id and client_secret by using the echo and base64 command:

echo -n "YOUR CLIENT ID OR SECRET" | base64

This example file is located at /etc/genestack/kustomize/grafana/base example secret file:

apiversion: v1
data:
  client_id: base64_encoded_client_id
  client_secret: base64_encoded_client_secret
kind: secret
metadata:
  name: azure-client
  namespace: grafana
type: opaque

Create your ssl files

If you are configuring grafana to use tls/ssl, you should create a file for your certificate and a file for your key. After the deployment, these files can be deleted if desired since the cert and key will now be in a Kubernetes secret.

Your cert and key files should look something like the following (cert and key example taken from VMware Docs).

These example files are located in /etc/genestack/kustomize/grafana/base

Example

Cert file (example-cert.pem)Key file (example-key.pem)

Update datasources.yaml

The datasource.yaml file is located at /etc/genestack/kustomize/grafana/base

If you have specific datasources that should be populated when grafana deploys, update the datasource.yaml to use your values. The example below shows one way to configure prometheus and loki datasources.

example datasources.yaml file:

datasources:
  datasources.yaml:
    apiversion: 1
    datasources:
    - name: prometheus
      type: prometheus
      access: proxy
      url: http://kube-prometheus-stack-prometheus.prometheus.svc.cluster.local:9090
      isdefault: true
    - name: loki
      type: loki
      access: proxy
      url: http://loki-gateway.{{ $.Release.Namespace }}.svc.cluster.local:80
      editable: false

Update grafana-values.yaml

The grafana-values.yaml file is located at /etc/genestack/kustomize/grafana/base

You must edit this file to include your specific url and azure tenant id

Create the tls secret and install

kubectl -n grafana create secret tls grafana-tls-public --cert=/etc/genestack/kustomize/grafana/base/cert.pem --key=/etc/genestack/kustomize/grafana/base/key.pem

kubectl kustomize --enable-helm /etc/genestack/kustomize/grafana/overlay | \
  kubectl -n grafana apply -f -