Files
observability/grafana/helm-values.yaml
Mayne0213 a3003d597f PERF(observability): adjust resources based on VPA
- Update blackbox-exporter cpu 15m→23m, memory 64Mi→100Mi
- Update grafana cpu 11m→23m, memory 425Mi→175Mi
- Update loki cpu 23m→63m, memory 462Mi→363Mi
- Update tempo cpu 50m→15m, memory 128Mi→100Mi
- Update thanos memory 128Mi→283Mi
- Update node-exporter memory 64Mi→100Mi
- Update kube-state-metrics memory 100Mi→105Mi
- Update opentelemetry-operator cpu 10m→11m, memory 256Mi→75Mi
- Update vpa memory 128Mi→100Mi
2026-01-10 14:33:40 +09:00

117 lines
2.6 KiB
YAML

# Grafana Helm Values
# Chart: https://github.com/grafana/helm-charts/tree/main/charts/grafana
fullnameOverride: grafana
replicas: 1
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
podAffinityTerm:
labelSelector:
matchLabels:
app.kubernetes.io/name: grafana
topologyKey: kubernetes.io/hostname
persistence:
enabled: false
# PostgreSQL database - use existing bluemayne superuser
env:
GF_DATABASE_TYPE: postgres
GF_DATABASE_HOST: postgresql-rw.postgresql.svc.cluster.local:5432
GF_DATABASE_NAME: grafana
GF_DATABASE_USER: bluemayne
GF_DATABASE_SSL_MODE: disable
envValueFrom:
GF_DATABASE_PASSWORD:
secretKeyRef:
name: grafana-db-password
key: password
initChownData:
enabled: false
podSecurityContext:
fsGroup: 472
fsGroupChangePolicy: "Always"
resources:
requests:
cpu: 23m
memory: 175Mi
limits:
memory: 175Mi
service:
type: ClusterIP
port: 80
datasources:
datasources.yaml:
apiVersion: 1
datasources:
- name: Thanos
type: prometheus
access: proxy
url: http://thanos-query.thanos.svc.cluster.local:9090
isDefault: true
editable: true
jsonData:
timeInterval: "60s"
- name: Prometheus
type: prometheus
access: proxy
url: http://prometheus-kube-prometheus-prometheus.prometheus.svc.cluster.local:9090
isDefault: false
editable: true
- name: Loki
type: loki
access: proxy
url: http://loki.loki.svc.cluster.local:3100
editable: true
- name: Alertmanager
type: alertmanager
access: proxy
url: http://alertmanager.alertmanager.svc.cluster.local:9093
editable: true
jsonData:
implementation: prometheus
# Dashboards are manually imported via Grafana UI
# JSON files stored in dashboards/ directory for reference
grafana.ini:
server:
root_url: "https://grafana0213.kro.kr"
auth.anonymous:
enabled: true
org_role: Admin
security:
allow_embedding: true
auth.basic:
enabled: false
auth:
disable_login_form: true
disable_signout_menu: true
news:
news_feed_enabled: false
ingress:
enabled: true
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
hosts:
- grafana0213.kro.kr
- www.grafana0213.kro.kr
tls:
- secretName: grafana-tls
hosts:
- grafana0213.kro.kr
- www.grafana0213.kro.kr