apiVersion: v1
data:
  grafana.ini: |
    [analytics]
    check_for_updates = true
    [auth]
    disable_login_form = true
    oauth_allow_insecure_email_lookup = true
    oauth_skip_org_role_update_sync = false
    signout_redirect_url = https://keycloak.199-19-213-151.nip.io/realms/atmosphere/protocol/openid-connect/logout?post_logout_redirect_uri=https://grafana.199-19-213-151.nip.io/login
    [auth.generic_oauth]
    allow_sign_up = true
    api_url = https://keycloak.199-19-213-151.nip.io/realms/atmosphere/protocol/openid-connect/userinfo
    auth_url = https://keycloak.199-19-213-151.nip.io/realms/atmosphere/protocol/openid-connect/auth
    client_id = grafana
    client_secret = $__file{/etc/secrets/auth_generic_oauth/password}
    email_attribute_path = email
    enabled = true
    login_attribute_path = username
    name = Atmosphere
    name_attribute_path = full_name
    role_attribute_path = contains(resource_access.grafana.roles[*], 'admin') && 'Admin' || contains(resource_access.grafana.roles[*], 'editor') && 'Editor' || contains(resource_access.grafana.roles[*], 'viewer') && 'Viewer'
    role_attribute_strict = true
    scopes = openid email profile offline_access roles
    skip_org_role_sync = false
    tls_skip_verify_insecure = true
    token_url = https://keycloak.199-19-213-151.nip.io/realms/atmosphere/protocol/openid-connect/token
    [grafana_net]
    url = https://grafana.net
    [log]
    mode = console
    [paths]
    data = /var/lib/grafana/
    logs = /var/log/grafana
    plugins = /var/lib/grafana/plugins
    provisioning = /etc/grafana/provisioning
    [server]
    domain = grafana.199-19-213-151.nip.io
    root_url = https://grafana.199-19-213-151.nip.io
kind: ConfigMap
metadata:
  annotations:
    meta.helm.sh/release-name: kube-prometheus-stack
    meta.helm.sh/release-namespace: monitoring
  creationTimestamp: "2026-04-21T17:20:28Z"
  labels:
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: grafana
    app.kubernetes.io/version: 11.0.0
    helm.sh/chart: grafana-8.0.2
  name: kube-prometheus-stack-grafana
  namespace: monitoring
  resourceVersion: "4323"
  uid: 6ef1f569-9f49-4616-9ae7-b1e038644383
