apiVersion: grafana.integreatly.org/v1beta1
kind: Grafana
metadata:
  name: irc-now
  namespace: irc-josie-cloud
  labels:
    dashboards: irc-now
spec:
  config:
    auth:
      disable_login_form: "true"
    auth.anonymous:
      enabled: "false"
    auth.generic_oauth:
      enabled: "true"
      name: log in with irc.now
      allow_sign_up: "true"
      auto_login: "true"
      client_id: $__env{OIDC_CLIENT_ID}
      client_secret: $__env{OIDC_CLIENT_SECRET}
      scopes: openid email profile
      auth_url: https://auth.irc.now/realms/irc-now/protocol/openid-connect/auth
      token_url: https://auth.irc.now/realms/irc-now/protocol/openid-connect/token
      api_url: https://auth.irc.now/realms/irc-now/protocol/openid-connect/userinfo
      redirect_url: https://stats.irc.now/login/generic_oauth
      login_attribute_path: preferred_username
      name_attribute_path: preferred_username
      email_attribute_path: email
      role_attribute_path: "contains(groups[*], 'stats-admin') && 'Admin' || 'Viewer'"
      skip_org_role_sync: "false"
    dashboards:
      default_home_dashboard_uid: irc-now-public
    log:
      mode: console
    server:
      root_url: https://stats.irc.now
  deployment:
    spec:
      replicas: 1
      template:
        spec:
          containers:
            - name: grafana
              env:
                - name: OIDC_CLIENT_ID
                  valueFrom:
                    secretKeyRef:
                      name: oidc-stats
                      key: client-id
                - name: OIDC_CLIENT_SECRET
                  valueFrom:
                    secretKeyRef:
                      name: oidc-stats
                      key: client-secret
              resources:
                requests:
                  cpu: 100m
                  memory: 256Mi
                limits:
                  cpu: 250m
                  memory: 512Mi
              volumeMounts:
                - mountPath: /var/lib/grafana
                  name: grafana-storage
          volumes:
            - name: grafana-storage
              emptyDir: {}
  service:
    spec:
      ports:
        - name: grafana
          port: 3000
          protocol: TCP
          targetPort: 3000
      type: ClusterIP