viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ci skip] Remove Authentik forward auth from Grafana, add admin password management

Browse source 
Fixes HA mobile app 403 when embedding Grafana dashboards - the webview
blocks third-party cookies needed by Authentik forward auth. Grafana
already has anonymous Viewer access enabled, so forward auth is not
needed. Also adds grafana_admin_password variable and explicit resource
limits to prevent ResourceQuota issues during rolling updates.
This commit is contained in:
Viktor Barzin 2026-02-18 21:40:32 +00:00
parent 41d3358cc1
commit 9889728c49
5 changed files with 28 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/kubernetes/monitoring/grafana.tf
View file

@ -60,9 +60,10 @@ resource "helm_release" "grafana" {
create_namespace = true
name = "grafana"
atomic = true
timeout = 600
repository = "https://grafana.github.io/helm-charts"
chart = "grafana"
values = [templatefile("${path.module}/grafana_chart_values.yaml", { db_password = var.grafana_db_password })]
values = [templatefile("${path.module}/grafana_chart_values.yaml", { db_password = var.grafana_db_password, grafana_admin_password = var.grafana_admin_password })]
}