#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-grafana
- name: Deploy Grafana
  kubernetes.core.helm:
    name: grafana
    chart_ref: "{{ grafana_chart_ref }}"
    chart_version: "{{ grafana_chart_version }}"
    release_namespace: grafana
    create_namespace: true
    values:
      global:
        security:
          # Required for bitnamilegacy images; the chart otherwise refuses to
          # render (https://github.com/bitnami/charts/issues/30850).
          allowInsecureImages: true
      image:
        repository: "{{ grafana_image_repository }}"
        tag: "{{ grafana_image_tag }}"
      metrics:
        enabled: true
      admin:
        user: grafana_admin
        password: "{{ grafana_admin_password }}"
      persistence:
        size: 64Gi
      grafana:
        extraEnvVars:
          - name: GF_SERVER_DOMAIN
            value: "{{ grafana_domain }}"
          - name: GF_SERVER_ROOT_URL
            value: "https://{{ grafana_domain }}/"
      smtp:
        enabled: true
        user: grafana
        password: "{{ grafana_admin_password }}"
        host: mail.eom.dev:587
        fromAddress: grafana@eom.dev
        fromName: Grafana
      ldap:
        enabled: true
        allowSignUp: true
        configuration: "{{ lookup('template', 'ldap.toml.j2') }}"
      ingress:
        enabled: true
        pathType: Prefix
        hostname: "{{ grafana_domain }}"
        annotations:
          cert-manager.io/cluster-issuer: ca-issuer
        ingressClassName: nginx
        tls: true
      datasources:
        secretDefinition:
          apiVersion: 1
          datasources:
            - name: Prometheus
              type: prometheus
              access: proxy
              orgId: 1
              url: http://prometheus-server.prometheus.svc.cluster.local
              version: 1
              editable: true
              isDefault: true
            - name: Alertmanager
              uid: alertmanager
              type: alertmanager
              access: proxy
              orgId: 1
              url: http://prometheus-alertmanager.prometheus.svc.cluster.local
              version: 1
              editable: true