Fix secret

This commit is contained in:
dvirlabs 2025-05-20 10:17:38 +03:00
parent 770f424e51
commit 3521c1bfb6

View File

@ -30,6 +30,9 @@ datasources:
url: http://prometheus-server
isDefault: true
# ✅ טוען משתנים מה-Secret שנוצר ע״י ExternalSecret
envFromSecret: grafana-oidc-secret
grafana.ini:
server:
root_url: https://grafana-int.dvirlabs.com
@ -41,13 +44,10 @@ grafana.ini:
name: Keycloak
allow_sign_up: true
client_id: grafana
client_secret: 6mfAtg8ZrioiCZMsbMi4dbZyJk205nRi
client_secret: ${client_secret}
scopes: openid profile email
auth_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/auth
token_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/token
api_url: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/userinfo
role_attribute_path: contains(groups[*], 'grafana-admins') && 'Admin' || 'Viewer'
allow_assign_grafana_admin: true
env:
GF_AUTH_GENERIC_OAUTH_NAME: Keycloak