--- /dev/null
+---
+schema: armada/Chart/v1
+metadata:
+ schema: metadata/Document/v1
+ name: grafana
+ layeringDefinition:
+ abstract: false
+ layer: global
+ storagePolicy: cleartext
+ substitutions:
+ # Chart source
+ - src:
+ schema: pegleg/SoftwareVersions/v1
+ name: software-versions
+ path: .charts.osh_infra.grafana
+ dest:
+ path: .source
+
+ # Images
+ - src:
+ schema: pegleg/SoftwareVersions/v1
+ name: software-versions
+ path: .images.osh_infra.grafana
+ dest:
+ path: .values.images.tags
+
+ # Endpoints
+ - src:
+ schema: pegleg/EndpointCatalogue/v1
+ name: osh_infra_endpoints
+ path: .osh_infra.oslo_db
+ dest:
+ path: .values.endpoints.oslo_db
+ - src:
+ schema: pegleg/EndpointCatalogue/v1
+ name: osh_infra_endpoints
+ path: .osh_infra.oslo_db
+ dest:
+ path: .values.endpoints.oslo_db_session
+ - src:
+ schema: pegleg/EndpointCatalogue/v1
+ name: osh_infra_endpoints
+ path: .osh_infra.grafana
+ dest:
+ path: .values.endpoints.grafana
+ - src:
+ schema: pegleg/EndpointCatalogue/v1
+ name: osh_infra_endpoints
+ path: .osh_infra.monitoring
+ dest:
+ path: .values.endpoints.monitoring
+ - src:
+ schema: pegleg/EndpointCatalogue/v1
+ name: osh_infra_endpoints
+ path: .osh_infra.ldap
+ dest:
+ path: .values.endpoints.ldap
+ # Accounts
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.grafana.admin
+ dest:
+ path: .values.endpoints.grafana.auth.admin
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.grafana.oslo_db
+ dest:
+ path: .values.endpoints.oslo_db.auth.user
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.grafana.oslo_db.database
+ dest:
+ path: .values.endpoints.oslo_db.path
+ pattern: DB_NAME
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.grafana.oslo_db_session
+ dest:
+ path: .values.endpoints.oslo_db_session.auth.user
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.grafana.oslo_db_session.database
+ dest:
+ path: .values.endpoints.oslo_db_session.path
+ pattern: DB_NAME
+
+ # Secrets
+ - dest:
+ path: .values.endpoints.grafana.auth.admin.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_infra_grafana_admin_password
+ path: .
+ - dest:
+ path: .values.endpoints.oslo_db.auth.user.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_infra_grafana_oslo_db_password
+ path: .
+ - dest:
+ path: .values.endpoints.oslo_db_session.auth.user.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_infra_grafana_oslo_db_session_password
+ path: .
+ - dest:
+ path: .values.endpoints.oslo_db.auth.admin.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_infra_oslo_db_admin_password
+ path: .
+ - dest:
+ path: .values.endpoints.oslo_db_session.auth.admin.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_infra_oslo_db_admin_password
+ path: .
+
+ # LDAP Configuration Details
+ - src:
+ schema: pegleg/AccountCatalogue/v1
+ name: osh_infra_service_accounts
+ path: .osh_infra.ldap.admin.bind
+ dest:
+ path: .values.endpoints.ldap.auth.admin.bind_dn
+ - dest:
+ path: .values.endpoints.ldap.auth.admin.password
+ src:
+ schema: deckhand/Passphrase/v1
+ name: osh_keystone_ldap_password
+ path: .
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.subdomain
+ dest:
+ path: .values.conf.ldap.config.base_dns.search
+ pattern: SUBDOMAIN
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.domain
+ dest:
+ path: .values.conf.ldap.config.base_dns.search
+ pattern: DOMAIN
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.subdomain
+ dest:
+ path: .values.conf.ldap.config.base_dns.group_search
+ pattern: SUBDOMAIN
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.domain
+ dest:
+ path: .values.conf.ldap.config.base_dns.group_search
+ pattern: DOMAIN
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.common_name
+ dest:
+ path: .values.conf.ldap.config.filters.group_search
+ pattern: COMMON_NAME
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.subdomain
+ dest:
+ path: .values.conf.ldap.config.filters.group_search
+ pattern: SUBDOMAIN
+ - src:
+ schema: pegleg/CommonAddresses/v1
+ name: common-addresses
+ path: .ldap.domain
+ dest:
+ path: .values.conf.ldap.config.filters.group_search
+ pattern: DOMAIN
+data:
+ chart_name: grafana
+ release: grafana
+ namespace: osh-infra
+ wait:
+ timeout: 900
+ labels:
+ release_group: airship-grafana
+ install:
+ no_hooks: false
+ upgrade:
+ no_hooks: false
+ pre:
+ delete:
+ - type: job
+ labels:
+ release_group: airship-grafana
+ post:
+ create: []
+ values:
+ labels:
+ grafana:
+ node_selector_key: openstack-control-plane
+ node_selector_value: enabled
+ job:
+ node_selector_key: openstack-control-plane
+ node_selector_value: enabled
+ conf:
+ ldap:
+ config:
+ base_dns:
+ search: "DC=SUBDOMAIN,DC=DOMAIN,DC=com"
+ group_search: "OU=Groups,DC=SUBDOMAIN,DC=DOMAIN,DC=com"
+ filters:
+ search: "(sAMAccountName=%s)"
+ group_search: "(memberof=CN=COMMON_NAME,OU=Application,OU=Groups,DC=SUBDOMAIN,DC=DOMAIN,DC=com)"
+ template: |
+ verbose_logging = true
+ [[servers]]
+ host = "{{ tuple "ldap" "public" . | include "helm-toolkit.endpoints.hostname_fqdn_endpoint_lookup" }}"
+ port = {{ tuple "ldap" "public" "ldap" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
+ use_ssl = false
+ start_tls = false
+ ssl_skip_verify = false
+ bind_dn = "{{ .Values.endpoints.ldap.auth.admin.bind_dn }}"
+ bind_password = '{{ .Values.endpoints.ldap.auth.admin.password }}'
+ search_filter = "{{ .Values.conf.ldap.config.filters.search }}"
+ search_base_dns = ["{{ .Values.conf.ldap.config.base_dns.search }}"]
+ group_search_base_dns = ["{{ .Values.conf.ldap.config.base_dns.group_search }}"]
+ [servers.attributes]
+ username = "sAMAccountName"
+ surname = "sn"
+ member_of = "memberof"
+ email = "mail"
+ [[servers.group_mappings]]
+ group_dn = "{{.Values.endpoints.ldap.auth.admin.bind_dn }}"
+ org_role = "Admin"
+ [[servers.group_mappings]]
+ group_dn = "*"
+ org_role = "Viewer"
+ pod:
+ replicas:
+ grafana: 2
+ dependencies:
+ - osh-infra-helm-toolkit
+...
Code Review / yaml_builds.git / blobdiff