Files
ericandClaude Opus 5.5 51a69f1e62 Allow bitnamilegacy image in chart values
Chart 11.4.2 refuses to render with an unrecognized image unless
global.security.allowInsecureImages is set (bitnami/charts#30850).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-06 14:13:04 -05:00

72 lines
2.1 KiB
YAML

#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-grafana
- name: Deploy Grafana
kubernetes.core.helm:
name: grafana
chart_ref: "{{ grafana_chart_ref }}"
chart_version: "{{ grafana_chart_version }}"
release_namespace: grafana
create_namespace: true
values:
global:
security:
# Required for bitnamilegacy images; the chart otherwise refuses to
# render (https://github.com/bitnami/charts/issues/30850).
allowInsecureImages: true
image:
repository: "{{ grafana_image_repository }}"
tag: "{{ grafana_image_tag }}"
metrics:
enabled: true
admin:
user: grafana_admin
password: "{{ grafana_admin_password }}"
persistence:
size: 64Gi
grafana:
extraEnvVars:
- name: GF_SERVER_DOMAIN
value: "{{ grafana_domain }}"
- name: GF_SERVER_ROOT_URL
value: "https://{{ grafana_domain }}/"
smtp:
enabled: true
user: grafana
password: "{{ grafana_admin_password }}"
host: mail.eom.dev:587
fromAddress: grafana@eom.dev
fromName: Grafana
ldap:
enabled: true
allowSignUp: true
configuration: "{{ lookup('template', 'ldap.toml.j2') }}"
ingress:
enabled: true
pathType: Prefix
hostname: "{{ grafana_domain }}"
annotations:
cert-manager.io/cluster-issuer: ca-issuer
ingressClassName: nginx
tls: true
datasources:
secretDefinition:
apiVersion: 1
datasources:
- name: Prometheus
type: prometheus
access: proxy
orgId: 1
url: http://prometheus-server.prometheus.svc.cluster.local
version: 1
editable: true
isDefault: true
- name: Alertmanager
uid: alertmanager
type: alertmanager
access: proxy
orgId: 1
url: http://prometheus-alertmanager.prometheus.svc.cluster.local
version: 1
editable: true