86112314ed
This patchset enables TLS path between Prometheus and Grafana. Grafana pull data from Prometheus. As such, Prometheus is the server and Grafana is the client for TLS handshake. Change-Id: I50cb6f59472155415cff16a81ebaebd192064d65
32 lines
966 B
YAML
32 lines
966 B
YAML
---
|
|
conf:
|
|
grafana:
|
|
database:
|
|
ssl_mode: true
|
|
ca_cert_path: /etc/mysql/certs/ca.crt
|
|
client_key_path: /etc/mysql/certs/tls.key
|
|
client_cert_path: /etc/mysql/certs/tls.crt
|
|
provisioning:
|
|
datasources:
|
|
template: |
|
|
{{ $prom_host := tuple "monitoring" "internal" . | include "helm-toolkit.endpoints.hostname_fqdn_endpoint_lookup" }}
|
|
{{ $prom_uri := printf "https://%s" $prom_host }}
|
|
apiVersion: 1
|
|
datasources:
|
|
- name: prometheus
|
|
type: prometheus
|
|
access: proxy
|
|
orgId: 1
|
|
editable: true
|
|
basicAuth: true
|
|
basicAuthUser: {{ .Values.endpoints.monitoring.auth.user.username }}
|
|
jsonData:
|
|
tlsAuthWithCACert: true
|
|
secureJsonData:
|
|
basicAuthPassword: {{ .Values.endpoints.monitoring.auth.user.password }}
|
|
tlsCACert: $CACERT
|
|
url: {{ $prom_uri }}
|
|
manifests:
|
|
certificates: true
|
|
...
|