add kube stack

2025-09-20 07:31:02 -05:00
parent fbaa3877a2
commit 16c41556c3
5 changed files with 356 additions and 0 deletions
--- a/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml
+++ b/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml
@@ -0,0 +1,41 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: vault-grafana-oauth
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: grafana-oauth
+  data:
+  - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_ID
+    remoteRef:
+      key: secrets/kube-prometheus/grafana/oauth
+      property: GF_AUTH_GENERIC_OAUTH_CLIENT_ID
+  - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET
+    remoteRef:
+      key: secrets/kube-prometheus/grafana/oauth
+      property: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET     
+         
+---
+
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: vault-admin-credentials
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: grafana-admin-credentials
+  data:
+  - secretKey: admin-password
+    remoteRef:
+      key: secrets/kube-prometheus/grafana/admin
+      property: admin-password
+  - secretKey:  admin-user 
+    remoteRef:
+      key: secrets/kube-prometheus/grafana/admin
+      property:  admin-user