From 3521c1bfb625ff6cd3152e0aeea70818978b0f53 Mon Sep 17 00:00:00 2001
From: dvirlabs <114520947+dvirlabs@users.noreply.github.com>
Date: Tue, 20 May 2025 10:17:38 +0300
Subject: [PATCH] Fix secret

---
 charts/grafana/my-values/values-int.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/charts/grafana/my-values/values-int.yaml b/charts/grafana/my-values/values-int.yaml
index 861dda2..0196564 100644
--- a/charts/grafana/my-values/values-int.yaml
+++ b/charts/grafana/my-values/values-int.yaml
@@ -30,6 +30,9 @@ datasources:
         url: http://prometheus-server
         isDefault: true
 
+# ✅ טוען משתנים מה-Secret שנוצר ע״י ExternalSecret
+envFromSecret: grafana-oidc-secret
+
 grafana.ini:
   server:
     root_url: https://grafana-int.dvirlabs.com
@@ -41,13 +44,10 @@ grafana.ini:
     name: Keycloak
     allow_sign_up: true
     client_id: grafana
-    client_secret: 6mfAtg8ZrioiCZMsbMi4dbZyJk205nRi
+    client_secret: ${client_secret}
     scopes: openid profile email
     auth_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/auth
     token_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/token
     api_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/userinfo
     role_attribute_path: contains(groups[*], 'grafana-admins') && 'Admin' || 'Viewer'
     allow_assign_grafana_admin: true
-
-env:
-  GF_AUTH_GENERIC_OAUTH_NAME: Keycloak