From 3ee1a1fff8f1f621a25a32df4bb7bb35aa9c81f7 Mon Sep 17 00:00:00 2001
From: DeveloperDurp <DeveloperDurp@durp.info>
Date: Thu, 17 Nov 2022 18:15:20 -0600
Subject: [PATCH] test auth

---
 .../templates/grafana-oauth-sealed.yaml          | 16 ++++++++++++++++
 kube-prometheus-stack/values.yaml                | 12 +++++++++---
 2 files changed, 25 insertions(+), 3 deletions(-)
 create mode 100644 kube-prometheus-stack/templates/grafana-oauth-sealed.yaml

diff --git a/kube-prometheus-stack/templates/grafana-oauth-sealed.yaml b/kube-prometheus-stack/templates/grafana-oauth-sealed.yaml
new file mode 100644
index 0000000..a461ea4
--- /dev/null
+++ b/kube-prometheus-stack/templates/grafana-oauth-sealed.yaml
@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: grafana-oauth
+  namespace: kube-prometheus-stack
+spec:
+  encryptedData:
+    GF_AUTH_GENERIC_OAUTH_CLIENT_ID: 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
+    GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: grafana-oauth
+      namespace: kube-prometheus-stack
+
diff --git a/kube-prometheus-stack/values.yaml b/kube-prometheus-stack/values.yaml
index 9ea2ac7..ecf96d9 100644
--- a/kube-prometheus-stack/values.yaml
+++ b/kube-prometheus-stack/values.yaml
@@ -84,9 +84,15 @@ kube-prometheus-stack:
           auth_url: https://authentik.durp.info/application/o/authorize/
           token_url: https://authentik.durp.info/application/o/token/
           api_url: https://authentik.durp.info/application/o/userinfo/
-    env:
-      GF_AUTH_GENERIC_OAUTH_CLIENT_ID: "6a7eadea9bc68f7a59712a0365bd0822de9a6946"
-      GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: "c8105547137367e4fe0ba6b5c022ff322569a0b2ea93c9652b77762eb4a094558f9edf98f81aa7329ad724d569b126ff2e281989ebe289bbd7b855f5e80bad5d"
+    envValueFrom:
+      GF_AUTH_GENERIC_OAUTH_CLIENT_ID:
+        configMapKeyRef:
+          name: grafana-oauth
+          key: GF_AUTH_GENERIC_OAUTH_CLIENT_ID      
+      GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET:
+        configMapKeyRef:
+          name: grafana-oauth
+          key: GF_AUTH_GENERIC_OAUTH_CLIENT_ID      
 
   kubeApiServer:
     enabled: true