global:
  namespace: monitoring

grafana:
  extraSecretMounts:
    - name: es-certs
      mountPath: /etc/grafana/es-certs
      secretName: log-storage-es-http-certs-internal
  extraLabels:
    elasticsearch-master-http-client: "true"
  service:
    labels:
      elasticsearch-master-http-client: "true"
      app.kubernetes.io/name: grafana
  ingress:
    labels:
      elasticsearch-master-http-client: "true"
    enabled: true
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      traefik.ingress.kubernetes.io/router.tls: "true"
      traefik.ingress.kubernetes.io/router.tls.certresolver: "default"
      traefik.ingress.kubernetes.io/redirect-entry-point: https
      cert-manager.io/cluster-issuer: letsencrypt-prod
    hosts:
      - grafana.topkek.cloud
    path: /
    tls:
      - hosts:
          - grafana.topkek.cloud
        secretName: grafana-tls
  persistence:
    enabled: true
    type: pvc
    accessModes:
      - ReadWriteOnce
    size: 10Gi
    finalizers:
      - kubernetes.io/pvc-protection
  datasources:
    datasources.yaml:
      apiVersion: 1
      datasources:
        - name: Prometheus
          type: prometheus
          access: proxy
          url: http://prometheus-server.monitoring.svc.cluster.local
          isDefault: true
        - name: Elasticsearch
          type: elasticsearch
          url: http://log-storage-es-http.monitoring.svc.cluster.local:9200
          access: proxy
          jsonData:
            timeField: "@timestamp"
            esVersion: 70
            tlsAuth: true
            tlsClientCert: "/etc/grafana/es-certs/tls.crt"
            tlsClientKey: "/etc/grafana/es-certs/tls.key"
            tlsCaCert: "/etc/grafana/es-certs/ca.crt"