mirror of
https://gitlab.com/shouptech/flux.git
synced 2026-02-03 22:09:41 +00:00
71 lines
2.1 KiB
YAML
71 lines
2.1 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: grafanaproxy
|
|
namespace: grafana
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: grafanaproxy
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: grafanaproxy
|
|
spec:
|
|
containers:
|
|
- image: quay.io/oauth2-proxy/oauth2-proxy:v5.1.0
|
|
args: ["-email-domain=*", "-upstream=http://grafana:3000/"]
|
|
imagePullPolicy: IfNotPresent
|
|
name: grafanaproxy
|
|
env:
|
|
- name: OAUTH2_PROXY_SKIP_AUTH_REGEX
|
|
value: "/metrics(.*)"
|
|
- name: OAUTH2_PROXY_HTTP_ADDRESS
|
|
value: ":4180"
|
|
- name: OAUTH2_PROXY_COOKIE_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: grafanaproxy
|
|
key: cookie_secret
|
|
- name: OAUTH2_PROXY_PROVIDER
|
|
value: nextcloud
|
|
- name: OAUTH2_PROXY_CLIENT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: grafanaproxy
|
|
key: client_id
|
|
- name: OAUTH2_PROXY_CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: grafanaproxy
|
|
key: client_secret
|
|
- name: OAUTH2_PROXY_LOGIN_URL
|
|
value: https://cloud.shoup.io/index.php/apps/oauth2/authorize
|
|
- name: OAUTH2_PROXY_REDEEM_URL
|
|
value: https://cloud.shoup.io/index.php/apps/oauth2/api/v1/token
|
|
- name: OAUTH2_PROXY_VALIDATE_URL
|
|
value: https://cloud.shoup.io/ocs/v2.php/cloud/user?format=json
|
|
- name: OAUTH2_PROXY_COOKIE_DOMAIN
|
|
value: .shoup.io
|
|
- name: OAUTH2_PROXY_COOKIE_SECURE
|
|
value: "true"
|
|
- name: "OAUTH2_PROXY_COOKIE_NAME"
|
|
value: "_oauth2_proxy_grafana"
|
|
- name: "OAUTH2_PROXY_PASS_BASIC_AUTH"
|
|
value: "false"
|
|
- name: "OAUTH2_PROXY_PASS_USER_HEADERS"
|
|
value: "true"
|
|
- name: "OAUTH2_PROXY_SET_XAUTHREQUEST"
|
|
value: "true"
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: 4180
|
|
initialDelaySeconds: 600
|
|
periodSeconds: 30
|
|
timeoutSeconds: 5
|
|
successThreshold: 1
|
|
failureThreshold: 2
|
|
ports:
|
|
- containerPort: 443
|