T

Allow bitnamilegacy image in chart values

Chart 11.4.2 refuses to render with an unrecognized image unless
global.security.allowInsecureImages is set (bitnami/charts#30850).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-06 14:13:04 -05:00

defaults

Initial Grafana role, split out of ansible-role-eom

2026-11-06 14:00:23 -05:00

handlers

Initial Grafana role, split out of ansible-role-eom

2026-11-06 14:00:23 -05:00

README.md

ansible-role-grafana

Deploys Grafana to the eom.dev Kubernetes cluster with the Bitnami Helm chart, with LDAP sign-in mapped to Grafana organizations.

Requirements

kubernetes.core collection, Helm on the target host
OpenLDAP at openldap.openldap.svc.cluster.local
Prometheus and Alertmanager in the prometheus namespace

Role Variables

Required (from secrets.yaml):

grafana_admin_password
openldap_readonly_password

Defaults (defaults/main.yml):

Variable	Default
`grafana_chart_ref`	`oci://registry-1.docker.io/bitnamicharts/grafana`
`grafana_chart_version`	`11.4.2`
`grafana_image_repository`	`bitnamilegacy/grafana`
`grafana_image_tag`	`11.4.0-debian-12-r0`
`grafana_domain`	`grafana.eom.dev`

LDAP group mappings

Defined in templates/ldap.toml.j2. Grafana uses the first mapping that matches per organization, so owner groups must come before member groups.

LDAP group	Org	Role
Grafana Administrators	1 (Main)	Admin + server admin
Grafana Users	1 (Main)	Viewer
DevOps Owners	2 (DevOps)	Admin
DevOps Members	2 (DevOps)	Editor
Finance Owners	3 (Finance)	Admin

Example Playbook

- hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  roles:
    - role: ericomeehan.grafana

License

MIT-0