FEAT(loki): configure storage and HA

- Rename extraVolume to avoid duplicate name
- Add emptyDir for /var/loki cache
- Migrate to shared storage with MinIO
- Configure HA with 2 replicas
- Revert to single replica for Single Binary mode

grafana/helm-values.yaml

@@ -11,9 +11,21 @@ admin:
   passwordKey: admin-password
 
 persistence:
-  enabled: true
-  size: 2Gi
-  storageClassName: local-path
+  enabled: false
+
+# PostgreSQL database - use existing bluemayne superuser
+env:
+  GF_DATABASE_TYPE: postgres
+  GF_DATABASE_HOST: postgresql-rw.postgresql.svc.cluster.local:5432
+  GF_DATABASE_NAME: grafana
+  GF_DATABASE_USER: bluemayne
+  GF_DATABASE_SSL_MODE: disable
+
+envValueFrom:
+  GF_DATABASE_PASSWORD:
+    secretKeyRef:
+      name: grafana-db-password
+      key: password
 
 initChownData:
   enabled: false

grafana/manifests/secret.yaml

@@ -20,3 +20,22 @@ spec:
       remoteRef:
         key: grafana
         property: ADMIN_PASSWORD
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: grafana-db-password
+  namespace: grafana
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: grafana-db-password
+    creationPolicy: Owner
+  data:
+    - secretKey: password
+      remoteRef:
+        key: postgresql
+        property: PASSWORD