helm-release.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: kube-prometheus-stack
  namespace: kube-prometheus-stack
  labels:
    app.kubernetes.io/remediation: enabled
spec:
  interval: 10m
  chart:
    spec:
      chart: kube-prometheus-stack
      version: 65.3.1
      sourceRef:
        kind: HelmRepository
        name: kube-prometheus-stack
  # https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml
  values:
    grafana:
      env:
        DEX_CLIENT_SECRET: ${dex_client_secret}
      grafana.ini:
        server:
          domain: grafana.${cluster_domain}
          root_url: https://grafana.${cluster_domain}
        auth.generic_oauth:
          enabled: true
          name: GitHub
          auth_url: https://dex.${cluster_domain}/auth
          token_url: https://dex.${cluster_domain}/token
          api_url: https://dex.${cluster_domain}
          client_id: github
          client_secret: $${DEX_CLIENT_SECRET}
          allow_sign_up: true
          auto_login: true
          scopes: openid profile email groups
          use_pkce: true
          use_refresh_token: true
      ingress:
        enabled: true
        hosts:
          - grafana.${cluster_domain}
        annotations:
          gethomepage.dev/enabled: "true"
          gethomepage.dev/name: Grafana
          gethomepage.dev/description: Open-source analytics and monitoring visualization tool.
          gethomepage.dev/group: Monitoring
          gethomepage.dev/icon: grafana
          gethomepage.dev/app: kube-prometheus-stack-grafana
          gethomepage.dev/pod-selector: app.kubernetes.io/name=grafana
    prometheus:
      ingress:
        enabled: true
        hosts:
          - prometheus.${cluster_domain}
        annotations:
          traefik.ingress.kubernetes.io/router.middlewares: traefik-forward-auth@kubernetescrd
          gethomepage.dev/enabled: "true"
          gethomepage.dev/name: Prometheus
          gethomepage.dev/description: Open-source monitoring system and time series database.
          gethomepage.dev/group: Monitoring
          gethomepage.dev/icon: prometheus
          gethomepage.dev/app: kube-prometheus-stack-prometheus
          gethomepage.dev/pod-selector: app.kubernetes.io/name=prometheus