videocall-rs/helm-videocall-deployment/infrastructure/grafana/values.yaml at 2eba156be536d3beed9b852eb7775f28a0474df4 · security-union/videocall-rs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
# Grafana values for videocall monitoring (minimal resources)
grafana:
  # Image configuration
  image:
    tag: "10.0.0"

  # Minimal resources for cost optimization
  resources:
    limits:
      cpu: 50m
      memory: 128Mi
    requests:
      cpu: 50m
      memory: 64Mi

  # Single replica
  replicas: 1

  # Persistence (minimal)
  persistence:
    enabled: true
    size: 1Gi
    storageClassName: "local-path"

  # Admin credentials from secret
  adminUser: admin
  adminPassword: password

  # Service configuration
  service:
    type: ClusterIP
    port: 80

  # Ingress configuration
  ingress:
    enabled: true
    annotations:
      kubernetes.io/ingress.class: "nginx"
      cert-manager.io/issuer: "letsencrypt-prod"
      nginx.ingress.kubernetes.io/ssl-redirect: "true"
      nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
      nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "16k"
    hosts:
      - grafana.YOUR_DOMAIN_NAME
    tls:
      - secretName: grafana-tls
        hosts:
          - grafana.YOUR_DOMAIN_NAME

  # Grafana configuration
  grafana.ini:
    server:
      domain: grafana.YOUR_DOMAIN_NAME
      root_url: https://grafana.YOUR_DOMAIN_NAME
    security:
      admin_user: admin
      admin_password: password
    users:
      allow_sign_up: false
    auth.anonymous:
      enabled: false

  # Datasources
  datasources:
    datasources.yaml:
      apiVersion: 1
      datasources:
        - name: Prometheus
          type: prometheus
          url: http://prometheus-server:80
          access: proxy
          isDefault: true

  # Dashboard provisioning
  dashboards:
    default:
      videocall-health:
        file: dashboards/videocall-health.json

  # Security context
  securityContext:
    runAsUser: 472
    runAsGroup: 472
    fsGroup: 472

  # Pod security context
  podSecurityContext:
    runAsUser: 472
    runAsGroup: 472
    fsGroup: 472