From 9b4893d1c375d6597651fec5d2201f512181cf20 Mon Sep 17 00:00:00 2001
From: Joe Banks <joe@jb3.dev>
Date: Mon, 15 Apr 2024 18:33:44 +0100
Subject: Move Grafana to monitoring namespace

---
 .../monitoring/grafana/deployment-grafana.yaml     | 53 ++++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml

(limited to 'kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml')

diff --git a/kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml b/kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml
new file mode 100644
index 0000000..87e3059
--- /dev/null
+++ b/kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml
@@ -0,0 +1,53 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: grafana
+  namespace: monitoring
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: grafana
+  template:
+    metadata:
+      labels:
+        app: grafana
+    spec:
+      containers:
+        - name: grafana
+          image: grafana/grafana:11.0.0-preview
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 3000
+          resources:
+            requests:
+             cpu: 200m
+             memory: 100Mi
+            limits:
+              cpu: 300m
+              memory: 250Mi
+          envFrom:
+            - configMapRef:
+                name: grafana-default
+            - secretRef:
+                name: grafana-secret-env
+          volumeMounts:
+            - mountPath: /var/lib/grafana
+              name: grafana-volume
+            - mountPath: /tmp
+              name: grafana-tmp
+          securityContext:
+            readOnlyRootFilesystem: true
+      volumes:
+        - name: grafana-volume
+          persistentVolumeClaim:
+            claimName: grafana-storage
+        - name: grafana-tmp
+          emptyDir:
+            medium: Memory
+      securityContext:
+        fsGroup: 2000
+        runAsUser: 1000
+        runAsNonRoot: true
-- 
cgit v1.2.3