aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/namespaces/monitoring/grafana/deployment-grafana.yaml
blob: 1303cd96a86fe3ad89b0908f6eeead0929170347 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
apiVersion: apps/v1
kind: Deployment
metadata:
  name: grafana
  namespace: monitoring
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: grafana
  template:
    metadata:
      labels:
        app: grafana
    spec:
      containers:
        - name: grafana
          image: grafana/grafana:11.0.0-preview
          imagePullPolicy: Always
          ports:
            - containerPort: 3000
          resources:
            requests:
              cpu: 200m
              memory: 100Mi
            limits:
              cpu: 300m
              memory: 250Mi
          envFrom:
            - configMapRef:
                name: grafana-default
            - configMapRef:
                name: grafana-ldap
            - secretRef:
                name: grafana-secret-env
          volumeMounts:
            - mountPath: /var/lib/grafana
              name: grafana-volume
            - mountPath: /tmp
              name: grafana-tmp
            - mountPath: /opt/pydis
              name: grafana-ldap-toml
            - mountPath: /opt/ipa-ca
              name: ipa-ca
          securityContext:
            readOnlyRootFilesystem: true
      volumes:
        - name: grafana-volume
          persistentVolumeClaim:
            claimName: grafana-storage
        - name: grafana-ldap-toml
          configMap:
            name: grafana-ldap-toml
        - name: grafana-tmp
          emptyDir:
            medium: Memory
        - name: ipa-ca
          configMap:
            name: ipa-ca-configmap
      securityContext:
        fsGroup: 2000
        runAsUser: 1000
        runAsNonRoot: true