From 6da4eba1dcbea7a9430eaf8764670901816f09c0 Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Thu, 8 Jan 2026 19:30:06 +0900
Subject: [PATCH] CHORE(grafana): remove admin login secret for SSO

- Remove grafana-admin-password ExternalSecret
- Remove admin section from helm-values.yaml
- Authentication handled by Authelia SSO middleware
---
 grafana/helm-values.yaml      |  7 -------
 grafana/manifests/secret.yaml | 23 -----------------------
 2 files changed, 30 deletions(-)

diff --git a/grafana/helm-values.yaml b/grafana/helm-values.yaml
index bf1027c..2cf7e09 100644
--- a/grafana/helm-values.yaml
+++ b/grafana/helm-values.yaml
@@ -15,13 +15,6 @@ affinity:
             app.kubernetes.io/name: grafana
         topologyKey: kubernetes.io/hostname
 
-admin:
-  user: bluemayne
-  # Password is managed via SealedSecret: grafana-admin-password
-  existingSecret: grafana-admin-password
-  userKey: admin-user
-  passwordKey: admin-password
-
 persistence:
   enabled: false
 
diff --git a/grafana/manifests/secret.yaml b/grafana/manifests/secret.yaml
index 1b3e071..87bfd06 100644
--- a/grafana/manifests/secret.yaml
+++ b/grafana/manifests/secret.yaml
@@ -1,28 +1,5 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
-metadata:
-  name: grafana-admin-password
-  namespace: grafana
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault-backend
-  target:
-    name: grafana-admin-password
-    creationPolicy: Owner
-  data:
-    - secretKey: admin-user
-      remoteRef:
-        key: grafana
-        property: ADMIN_USER
-    - secretKey: admin-password
-      remoteRef:
-        key: grafana
-        property: ADMIN_PASSWORD
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
 metadata:
   name: grafana-db-password
   namespace: grafana