initial grafana

Author: prabhatsharma

deployment/grafana.ini

@@ -12,7 +12,8 @@ token_url = https://accounts.google.com/o/oauth2/token
 allowed_domains = zinclabs.io
 allow_sign_up = true
 
-enable_alpha = false
+[plugins]
+enable_alpha = true
 app_tls_skip_verify_insecure = false
 # Enter a comma-separated list of plugin identifiers to identify plugins to load even if they are unsigned. Plugins with modified signatures are never loaded.
 allow_loading_unsigned_plugins = zinclabs_zincobserve

deployment/grafana_statefulset.yaml

@@ -1,3 +1,19 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    email: [email protected]
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+    - http01:
+        ingress:
+          class: nginx
+---
+
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -13,10 +29,14 @@ spec:
       labels:
         app: grafana
     spec:
-      initContainers:
-      - name: zincobserve_plugin_loader
-        image: busybox
-        command: ['sh', '-c', 'cp -R /code/dist/* /var/lib/grafana/plugins/']
+      securityContext:
+        fsGroup: 2000
+        runAsUser: 10000
+        runAsGroup: 3000
+      # initContainers:
+      # - name: zincobserve_plugin_loader
+      #   image: busybox
+      #   command: ['sh', '-c', 'cp -R /code/dist/* /var/lib/grafana/plugins/']
       containers:
       - name: grafana
         image: grafana/grafana:latest
@@ -28,6 +48,8 @@ spec:
           mountPath: /var/lib/grafana
         - name: grafana-plugins
           mountPath: /var/lib/grafana/plugins
+        - name: grafana-config
+          mountPath: /etc/grafana
       volumes:
         - name: grafana-base
           persistentVolumeClaim: