fix: grafana sso config (#223)

immich-app · Oct 9, 2024 · 1c3e874 · 1c3e874
1 parent 9a4c031
commit 1c3e874
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 8 deletions.
diff --git a/kubernetes/apps/monitoring/grafana/app/grafana.yaml b/kubernetes/apps/monitoring/grafana/app/grafana.yaml
@@ -7,14 +7,16 @@ metadata:
     dashboards: "grafana"
 spec:
   config:
+    server:
+      root_url: https://monitoring.immich.cloud/
     auth.generic_oauth:
-        enabled: "true"
-        client_id: grafana
-        client_secret: ${GRAFANA_OAUTH_CLIENT_SECRET}
-        scopes: openid email profile groups offline_access
-        auth_url: https://auth.immich.cloud/auth
-        token_url: https://auth.immich.cloud/token
-        api_url: https://auth.immich.cloud/userinfo
+      enabled: "true"
+      client_id: grafana
+      client_secret: ${GRAFANA_OAUTH_CLIENT_SECRET}
+      scopes: openid email profile groups offline_access
+      auth_url: https://auth.immich.cloud/auth
+      token_url: https://auth.immich.cloud/token
+      api_url: https://auth.immich.cloud/userinfo
   persistentVolumeClaim:
     spec:
       accessModes:

diff --git a/kubernetes/apps/monitoring/grafana/secrets/oauth.yaml b/kubernetes/apps/monitoring/grafana/secrets/oauth.yaml
@@ -2,6 +2,6 @@ apiVersion: onepassword.com/v1
 kind: OnePasswordItem
 metadata:
   name: grafana-oauth
-  namespace: monitoring
+  namespace: flux-system
 spec:
   itemPath: "vaults/Kubernetes/items/grafana-oauth-client-secret"