github.com/replicatedcom/ship@v0.50.0/integration/init/grafana-with-values/expected/rendered.yaml (about) 1 apiVersion: v1 2 kind: ServiceAccount 3 metadata: 4 labels: 5 app: grafana 6 release: grafana 7 name: grafana 8 --- 9 apiVersion: rbac.authorization.k8s.io/v1beta1 10 kind: Role 11 metadata: 12 labels: 13 app: grafana 14 release: grafana 15 name: grafana 16 rules: 17 - apiGroups: 18 - extensions 19 resourceNames: 20 - grafana 21 resources: 22 - podsecuritypolicies 23 verbs: 24 - use 25 --- 26 apiVersion: rbac.authorization.k8s.io/v1 27 kind: ClusterRole 28 metadata: 29 labels: 30 app: grafana 31 release: grafana 32 name: grafana-clusterrole 33 rules: [] 34 --- 35 apiVersion: rbac.authorization.k8s.io/v1beta1 36 kind: RoleBinding 37 metadata: 38 labels: 39 app: grafana 40 release: grafana 41 name: grafana 42 roleRef: 43 apiGroup: rbac.authorization.k8s.io 44 kind: Role 45 name: grafana 46 subjects: 47 - kind: ServiceAccount 48 name: grafana 49 --- 50 apiVersion: rbac.authorization.k8s.io/v1 51 kind: ClusterRoleBinding 52 metadata: 53 labels: 54 app: grafana 55 release: grafana 56 name: grafana-clusterrolebinding 57 roleRef: 58 apiGroup: rbac.authorization.k8s.io 59 kind: ClusterRole 60 name: grafana-clusterrole 61 subjects: 62 - kind: ServiceAccount 63 name: grafana 64 namespace: default 65 --- 66 apiVersion: v1 67 data: 68 grafana.ini: | 69 [analytics] 70 check_for_updates = true 71 [grafana_net] 72 url = https://grafana.net 73 [log] 74 mode = console 75 [paths] 76 data = /var/lib/grafana/data 77 logs = /var/log/grafana 78 plugins = /var/lib/grafana/plugins 79 provisioning = /etc/grafana/provisioning 80 kind: ConfigMap 81 metadata: 82 labels: 83 app: grafana 84 release: grafana 85 name: grafana 86 --- 87 apiVersion: v1 88 data: 89 admin-password: c3Ryb25ncGFzc3dvcmQ= 90 admin-user: YWRtaW4= 91 ldap-toml: "" 92 kind: Secret 93 metadata: 94 labels: 95 app: grafana 96 release: grafana 97 name: grafana 98 type: Opaque 99 --- 100 apiVersion: v1 101 kind: Service 102 metadata: 103 labels: 104 app: grafana 105 release: grafana 106 name: grafana 107 spec: 108 ports: 109 - name: service 110 port: 80 111 protocol: TCP 112 targetPort: 3000 113 selector: 114 app: grafana 115 release: grafana 116 type: ClusterIP 117 --- 118 apiVersion: apps/v1beta2 119 kind: Deployment 120 metadata: 121 labels: 122 app: grafana 123 release: grafana 124 name: grafana 125 spec: 126 replicas: 1 127 selector: 128 matchLabels: 129 app: grafana 130 release: grafana 131 strategy: 132 type: RollingUpdate 133 template: 134 metadata: 135 labels: 136 app: grafana 137 release: grafana 138 spec: 139 containers: 140 - env: 141 - name: GF_SECURITY_ADMIN_USER 142 valueFrom: 143 secretKeyRef: 144 key: admin-user 145 name: grafana 146 - name: GF_SECURITY_ADMIN_PASSWORD 147 valueFrom: 148 secretKeyRef: 149 key: admin-password 150 name: grafana 151 image: grafana/grafana:5.3.4 152 imagePullPolicy: IfNotPresent 153 livenessProbe: 154 failureThreshold: 10 155 httpGet: 156 path: /api/health 157 port: 3000 158 initialDelaySeconds: 60 159 timeoutSeconds: 30 160 name: grafana 161 ports: 162 - containerPort: 80 163 name: service 164 protocol: TCP 165 - containerPort: 3000 166 name: grafana 167 protocol: TCP 168 readinessProbe: 169 httpGet: 170 path: /api/health 171 port: 3000 172 resources: {} 173 volumeMounts: 174 - mountPath: /etc/grafana/grafana.ini 175 name: config 176 subPath: grafana.ini 177 - mountPath: /etc/grafana/ldap.toml 178 name: ldap 179 subPath: ldap.toml 180 - mountPath: /var/lib/grafana 181 name: storage 182 subPath: null 183 securityContext: 184 fsGroup: 472 185 runAsUser: 472 186 serviceAccountName: grafana 187 volumes: 188 - configMap: 189 name: grafana 190 name: config 191 - name: ldap 192 secret: 193 items: 194 - key: ldap-toml 195 path: ldap.toml 196 secretName: grafana 197 - name: storage 198 persistentVolumeClaim: 199 claimName: grafana 200 --- 201 apiVersion: extensions/v1beta1 202 kind: PodSecurityPolicy 203 metadata: 204 annotations: 205 apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default 206 apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default 207 seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default 208 seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default 209 labels: 210 app: grafana 211 release: grafana 212 name: grafana 213 spec: 214 allowPrivilegeEscalation: false 215 fsGroup: 216 rule: RunAsAny 217 hostIPC: false 218 hostNetwork: false 219 hostPID: false 220 privileged: false 221 readOnlyRootFilesystem: false 222 requiredDropCapabilities: 223 - ALL 224 runAsUser: 225 rule: RunAsAny 226 seLinux: 227 rule: RunAsAny 228 supplementalGroups: 229 rule: RunAsAny 230 volumes: 231 - configMap 232 - emptyDir 233 - projected 234 - secret 235 - downwardAPI 236 - persistentVolumeClaim 237 --- 238 apiVersion: v1 239 kind: PersistentVolumeClaim 240 metadata: 241 labels: 242 app: grafana 243 release: grafana 244 name: grafana 245 spec: 246 accessModes: 247 - ReadWriteOnce 248 resources: 249 requests: 250 storage: 111Gi 251 storageClassName: default