grafana.yml

datasources:
  datasources.yaml:
    apiVersion: 1
    datasources:
      - name: Prometheus
        type: prometheus
        url: http://prometheus-server.prometheus.svc.cluster.local
        access: proxy
        isDefault: true

      %{ if grafana_loki_enabled }
      - name: Loki
        type: loki
        url:  http://loki-gateway.loki.svc.cluster.local
        access: proxy
        isDefault: false
      %{ endif }

      # Additional datasources from Terraform
      %{ for ds in datasources }
      - name: "${ds.name}"
        type: "${ds.type}"
        url: "${ds.url}"
        access: "${ds.access}"
        isDefault: ${ds.isDefault}
      %{ endfor }

sidecar:
  dashboards:
    enabled: true
    defaultFolderName: "General"
    label: grafana_dashboard
    labelValue: "1"
    folderAnnotation: grafana_folder
    searchNamespace: ALL
    provider:
      foldersFromFilesStructure: true

grafana.ini:
  auth.google:
    enabled: true
    auto_login: false
    client_id: ${GOOGLE_CLIENT_ID}
    client_secret: ${GOOGLE_CLIENT_SECRET}
    scopes: https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email
    auth_url: https://accounts.google.com/o/oauth2/auth
    token_url: https://accounts.google.com/o/oauth2/token
    allow_sign_up: true
    %{ for host in INGRESS_HOSTS }
    allowed_domains: ${host}
    hosted_domain: ${host}
    %{ endfor }

  server:
    %{ for host in INGRESS_HOSTS }
    domain: ${host}
    root_url: "%(protocol)s://%(domain)s/grafana"
    serve_from_sub_path: true
    %{ endfor }

ingress:
  ingressClassName: nginx
  enabled: ${INGRESS_ENABLED}
  hosts:
    %{ for host in INGRESS_HOSTS }
    - ${host}
    %{ endfor }
  path: "/grafana"

assertNoLeakedSecrets: false