CHORE(grafana): disable local auth, add SSO
- Enable anonymous auth with Admin role - Disable login form - Add Authelia middleware to ingress
This commit is contained in:
@@ -111,15 +111,16 @@ dashboards:
|
||||
|
||||
grafana.ini:
|
||||
server:
|
||||
root_url: "http://grafana0213.kro.kr"
|
||||
root_url: "https://grafana0213.kro.kr"
|
||||
auth.anonymous:
|
||||
enabled: false
|
||||
enabled: true
|
||||
org_role: Admin
|
||||
security:
|
||||
allow_embedding: true
|
||||
auth.basic:
|
||||
enabled: false
|
||||
auth:
|
||||
disable_login_form: false
|
||||
disable_login_form: true
|
||||
disable_signout_menu: true
|
||||
news:
|
||||
news_feed_enabled: false
|
||||
|
||||
@@ -4,11 +4,8 @@ metadata:
|
||||
name: grafana-ingress
|
||||
namespace: grafana
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
# HTTP를 HTTPS로 자동 리다이렉트
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
# cert-manager가 인증서를 자동으로 발급하도록 설정
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
# TLS 설정
|
||||
|
||||
Reference in New Issue
Block a user