CHORE(grafana): disable local auth, add SSO
- Enable anonymous auth with Admin role - Disable login form - Add Authelia middleware to ingress
This commit is contained in:
@@ -111,15 +111,16 @@ dashboards:
|
|||||||
|
|
||||||
grafana.ini:
|
grafana.ini:
|
||||||
server:
|
server:
|
||||||
root_url: "http://grafana0213.kro.kr"
|
root_url: "https://grafana0213.kro.kr"
|
||||||
auth.anonymous:
|
auth.anonymous:
|
||||||
enabled: false
|
enabled: true
|
||||||
|
org_role: Admin
|
||||||
security:
|
security:
|
||||||
allow_embedding: true
|
allow_embedding: true
|
||||||
auth.basic:
|
auth.basic:
|
||||||
enabled: false
|
enabled: false
|
||||||
auth:
|
auth:
|
||||||
disable_login_form: false
|
disable_login_form: true
|
||||||
disable_signout_menu: true
|
disable_signout_menu: true
|
||||||
news:
|
news:
|
||||||
news_feed_enabled: false
|
news_feed_enabled: false
|
||||||
|
|||||||
@@ -4,11 +4,8 @@ metadata:
|
|||||||
name: grafana-ingress
|
name: grafana-ingress
|
||||||
namespace: grafana
|
namespace: grafana
|
||||||
annotations:
|
annotations:
|
||||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
|
||||||
# HTTP를 HTTPS로 자동 리다이렉트
|
|
||||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
||||||
# cert-manager가 인증서를 자동으로 발급하도록 설정
|
|
||||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||||
|
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
|
||||||
spec:
|
spec:
|
||||||
ingressClassName: traefik
|
ingressClassName: traefik
|
||||||
# TLS 설정
|
# TLS 설정
|
||||||
|
|||||||
Reference in New Issue
Block a user