helmsman

Created Diff never expires
43 removals
Words removed43
Total words1926
Words removed (%)2.23
826 lines
43 additions
Words added43
Total words1926
Words added (%)2.23
826 lines
_ _
_ _
| | | |
| | | |
| |__ ___| |_ __ ___ ___ _ __ ___ __ _ _ __
| |__ ___| |_ __ ___ ___ _ __ ___ __ _ _ __
| '_ \ / _ \ | '_ ` _ \/ __| '_ ` _ \ / _` | '_ \
| '_ \ / _ \ | '_ ` _ \/ __| '_ ` _ \ / _` | '_ \
| | | | __/ | | | | | \__ \ | | | | | (_| | | | |
| | | | __/ | | | | | \__ \ | | | | | (_| | | | |
|_| |_|\___|_|_| |_| |_|___/_| |_| |_|\__,_|_| |_| version: v3.7.3
|_| |_|\___|_|_| |_| |_|___/_| |_| |_|\__,_|_| |_| version: v3.7.3
A Helm-Charts-as-Code tool.
A Helm-Charts-as-Code tool.


2021-10-01 09:44:46 DEBUG: helm version --short --client
2021-10-01 09:47:11 DEBUG: helm version --short --client
2021-10-01 09:44:46 DEBUG: helm version --short --client
2021-10-01 09:47:11 DEBUG: helm version --short --client
2021-10-01 09:44:46 DEBUG: kubectl version --short --client
2021-10-01 09:47:11 DEBUG: kubectl version --short --client
2021-10-01 09:44:46 DEBUG: helm plugin list
2021-10-01 09:47:11 DEBUG: helm plugin list
2021-10-01 09:44:47 INFO: Parsed [[ test.yaml ]] successfully and found [ 1 ] apps
2021-10-01 09:47:11 INFO: Parsed [[ test.yaml ]] successfully and found [ 1 ] apps
2021-10-01 09:44:47 INFO: Validating desired state definition
2021-10-01 09:47:11 INFO: Validating desired state definition
2021-10-01 09:44:47 DEBUG: kubectl config current-context
2021-10-01 09:47:11 DEBUG: kubectl config current-context


Metadata:
Metadata:
---------
---------
org : gitlab.com/grassrootseconomics
org : gitlab.com/grassrootseconomics


Context:
Context:
---------
---------
default
default


Certificates:
Certificates:
---------
---------


Settings:
Settings:
---------
---------
{KubeContext: Username: Password: ClusterURI: ServiceAccount: StorageBackend:secret SlackWebhook: MSTeamsWebhook: ReverseDelete:false BearerToken:false BearerTokenPath: EyamlEnabled:false EyamlPrivateKeyPath: EyamlPublicKeyPath: GlobalHooks:map[] GlobalMaxHistory:0}
{KubeContext: Username: Password: ClusterURI: ServiceAccount: StorageBackend:secret SlackWebhook: MSTeamsWebhook: ReverseDelete:false BearerToken:false BearerTokenPath: EyamlEnabled:false EyamlPrivateKeyPath: EyamlPublicKeyPath: GlobalHooks:map[] GlobalMaxHistory:0}


Namespaces:
Namespaces:
-------------
-------------
grassroots :
grassroots :
protected: false
protected: false
disabled: false
disabled: false
labels:
labels:
annotations:
annotations:
-------------------
-------------------


Repositories:
Repositories:
-------------
-------------
grafana : https://grafana.github.io/helm-charts
grafana : https://grafana.github.io/helm-charts


Applications:
Applications:
---------------
---------------


name: grafana
name: grafana
description:
description:
namespace: grassroots
namespace: grassroots
enabled: true
enabled: true
chart: grafana/grafana
chart: grafana/grafana
version: 6.16.10
version: 6.16.10
valuesFile: .helmsman-tmp/tmp2613577303/grafana.yaml
valuesFile: .helmsman-tmp/tmp4024007849/grafana.yaml
valuesFiles:
valuesFiles:
postRenderer:
postRenderer:
test: false
test: false
protected: false
protected: false
wait: false
wait: false
priority: 0
priority: 0
SuccessCondition: <nil>
SuccessCondition: <nil>
SuccessTimeout: <nil>
SuccessTimeout: <nil>
DeleteOnSuccess: <nil>
DeleteOnSuccess: <nil>
preInstall: <nil>
preInstall: <nil>
postInstall: <nil>
postInstall: <nil>
preUpgrade: <nil>
preUpgrade: <nil>
postUpgrade: <nil>
postUpgrade: <nil>
preDelete: <nil>
preDelete: <nil>
postDelete: <nil>
postDelete: <nil>
no-hooks: false
no-hooks: false
timeout: 0
timeout: 0
values to override from env:
values to override from env:
-------------------
-------------------


Targets:
Targets:
---------------
---------------
2021-10-01 09:44:47 INFO: Setting up kubectl
2021-10-01 09:47:11 INFO: Setting up kubectl
2021-10-01 09:44:47 DEBUG: kubectl config current-context
2021-10-01 09:47:11 DEBUG: kubectl config current-context
2021-10-01 09:44:47 INFO: Setting up helm
2021-10-01 09:47:11 INFO: Setting up helm
2021-10-01 09:44:47 DEBUG: helm repo list --output json
2021-10-01 09:47:11 DEBUG: helm repo list --output json
2021-10-01 09:44:47 DEBUG: helm version --short --client
2021-10-01 09:47:11 DEBUG: helm version --short --client
2021-10-01 09:44:47 DEBUG: helm repo update
2021-10-01 09:47:11 DEBUG: helm repo update
2021-10-01 09:45:04 INFO: Setting up namespaces
2021-10-01 09:47:30 INFO: Setting up namespaces
2021-10-01 09:45:04 DEBUG: kubectl get namespace grassroots
2021-10-01 09:47:30 DEBUG: kubectl get namespace grassroots
2021-10-01 09:45:05 INFO: Getting chart information
2021-10-01 09:47:33 INFO: Getting chart information
2021-10-01 09:45:05 DEBUG: helm show chart grafana/grafana --version 6.16.10
2021-10-01 09:47:33 DEBUG: helm show chart grafana/grafana --version 6.16.10
2021-10-01 09:45:07 INFO: Charts validated.
2021-10-01 09:47:34 INFO: Charts validated.
2021-10-01 09:45:07 INFO: Preparing plan
2021-10-01 09:47:34 INFO: Preparing plan
2021-10-01 09:45:07 INFO: Acquiring current Helm state from cluster
2021-10-01 09:47:34 INFO: Acquiring current Helm state from cluster
2021-10-01 09:45:07 DEBUG: helm list --all --max 0 --output json -n grassroots
2021-10-01 09:47:34 DEBUG: helm list --all --max 0 --output json -n grassroots
2021-10-01 09:45:08 DEBUG: kubectl get secret -n grassroots -l owner=helm -l name=grafana -o jsonpath='{.items[-1].metadata.labels.HELMSMAN_CONTEXT}'
2021-10-01 09:47:35 DEBUG: kubectl get secret -n grassroots -l owner=helm -l name=grafana -o jsonpath='{.items[-1].metadata.labels.HELMSMAN_CONTEXT}'
2021-10-01 09:45:09 DEBUG: helm diff --suppress-secrets upgrade grafana grafana/grafana --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp2613577303/grafana.yaml
2021-10-01 09:47:36 DEBUG: helm diff --suppress-secrets upgrade grafana grafana/grafana --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp4024007849/grafana.yaml
2021-10-01 09:45:20 INFO: Checking if any Helmsman managed releases are no longer tracked by your desired state ...
2021-10-01 09:47:47 INFO: Checking if any Helmsman managed releases are no longer tracked by your desired state ...
2021-10-01 09:45:20 DEBUG: kubectl get secret -n grassroots -l MANAGED-BY=HELMSMAN -o custom-columns=NAME:.metadata.name,CTX:.metadata.labels.HELMSMAN_CONTEXT --no-headers
2021-10-01 09:47:47 DEBUG: kubectl get secret -n grassroots -l MANAGED-BY=HELMSMAN -o custom-columns=NAME:.metadata.name,CTX:.metadata.labels.HELMSMAN_CONTEXT --no-headers
2021-10-01 09:45:21 INFO: No untracked releases found
2021-10-01 09:47:48 INFO: No untracked releases found
2021-10-01 09:45:21 NOTICE: -------- PLAN starts here --------------
2021-10-01 09:47:48 NOTICE: -------- PLAN starts here --------------
2021-10-01 09:45:21 NOTICE: Release [ grafana ] will be updated -- priority: 0
2021-10-01 09:47:48 NOTICE: Release [ grafana ] will be updated -- priority: 0
2021-10-01 09:45:21 NOTICE: -------- PLAN ends here --------------
2021-10-01 09:47:48 NOTICE: -------- PLAN ends here --------------
2021-10-01 09:45:21 INFO: Printing the commands of the current plan ...
2021-10-01 09:47:48 INFO: Printing the commands of the current plan ...
helm upgrade grafana grafana/grafana --install --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp2613577303/grafana.yaml --debug
helm upgrade grafana grafana/grafana --install --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp4024007849/grafana.yaml --debug
2021-10-01 09:45:21 INFO: Executing plan
2021-10-01 09:47:48 INFO: Executing plan
2021-10-01 09:45:21 NOTICE: Upgrade release [ grafana ] to version [ 6.16.10 ] in namespace [ grassroots ]
2021-10-01 09:47:48 NOTICE: Upgrade release [ grafana ] to version [ 6.16.10 ] in namespace [ grassroots ]
2021-10-01 09:45:21 DEBUG: helm upgrade grafana grafana/grafana --install --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp2613577303/grafana.yaml --debug
2021-10-01 09:47:48 DEBUG: helm upgrade grafana grafana/grafana --install --version 6.16.10 --namespace grassroots -f .helmsman-tmp/tmp4024007849/grafana.yaml --debug
2021-10-01 09:45:40 NOTICE: Release "grafana" has been upgraded. Happy Helming!
2021-10-01 09:48:11 NOTICE: Release "grafana" has been upgraded. Happy Helming!
NAME: grafana
NAME: grafana
LAST DEPLOYED: Fri Oct 1 09:45:30 2021
LAST DEPLOYED: Fri Oct 1 09:47:58 2021
NAMESPACE: grassroots
NAMESPACE: grassroots
STATUS: deployed
STATUS: deployed
REVISION: 2
REVISION: 3
USER-SUPPLIED VALUES:
USER-SUPPLIED VALUES:
persistence:
persistence:
enabled: true
enabled: true
size: 1Gi
size: 1Gi


COMPUTED VALUES:
COMPUTED VALUES:
admin:
admin:
existingSecret: ""
existingSecret: ""
passwordKey: admin-password
passwordKey: admin-password
userKey: admin-user
userKey: admin-user
adminUser: admin
adminUser: admin
affinity: {}
affinity: {}
autoscaling:
autoscaling:
enabled: false
enabled: false
containerSecurityContext: {}
containerSecurityContext: {}
dashboardProviders: {}
dashboardProviders: {}
dashboards: {}
dashboards: {}
dashboardsConfigMaps: {}
dashboardsConfigMaps: {}
datasources: {}
datasources: {}
deploymentStrategy:
deploymentStrategy:
type: RollingUpdate
type: RollingUpdate
downloadDashboards:
downloadDashboards:
env: {}
env: {}
envFromSecret: ""
envFromSecret: ""
resources: {}
resources: {}
downloadDashboardsImage:
downloadDashboardsImage:
pullPolicy: IfNotPresent
pullPolicy: IfNotPresent
repository: curlimages/curl
repository: curlimages/curl
sha: ""
sha: ""
tag: 7.73.0
tag: 7.73.0
enableServiceLinks: true
enableServiceLinks: true
env: {}
env: {}
envFromSecret: ""
envFromSecret: ""
envFromSecrets: []
envFromSecrets: []
envRenderSecret: {}
envRenderSecret: {}
envValueFrom: {}
envValueFrom: {}
extraConfigmapMounts: []
extraConfigmapMounts: []
extraContainerVolumes: []
extraContainerVolumes: []
extraContainers: ""
extraContainers: ""
extraEmptyDirMounts: []
extraEmptyDirMounts: []
extraExposePorts: []
extraExposePorts: []
extraInitContainers: []
extraInitContainers: []
extraLabels: {}
extraLabels: {}
extraSecretMounts: []
extraSecretMounts: []
extraVolumeMounts: []
extraVolumeMounts: []
grafana.ini:
grafana.ini:
analytics:
analytics:
check_for_updates: true
check_for_updates: true
grafana_net:
grafana_net:
url: https://grafana.net
url: https://grafana.net
log:
log:
mode: console
mode: console
paths:
paths:
data: /var/lib/grafana/
data: /var/lib/grafana/
logs: /var/log/grafana
logs: /var/log/grafana
plugins: /var/lib/grafana/plugins
plugins: /var/lib/grafana/plugins
provisioning: /etc/grafana/provisioning
provisioning: /etc/grafana/provisioning
hostAliases: []
hostAliases: []
image:
image:
pullPolicy: IfNotPresent
pullPolicy: IfNotPresent
repository: grafana/grafana
repository: grafana/grafana
sha: ""
sha: ""
tag: 8.1.5
tag: 8.1.5
imageRenderer:
imageRenderer:
enabled: false
enabled: false
env:
env:
HTTP_HOST: 0.0.0.0
HTTP_HOST: 0.0.0.0
grafanaSubPath: ""
grafanaSubPath: ""
hostAliases: []
hostAliases: []
image:
image:
pullPolicy: Always
pullPolicy: Always
repository: grafana/grafana-image-renderer
repository: grafana/grafana-image-renderer
sha: ""
sha: ""
tag: latest
tag: latest
networkPolicy:
networkPolicy:
limitEgress: false
limitEgress: false
limitIngress: true
limitIngress: true
podPortName: http
podPortName: http
priorityClassName: ""
priorityClassName: ""
replicas: 1
replicas: 1
resources: {}
resources: {}
revisionHistoryLimit: 10
revisionHistoryLimit: 10
securityContext: {}
securityContext: {}
service:
service:
enabled: true
enabled: true
port: 8081
port: 8081
portName: http
portName: http
targetPort: 8081
targetPort: 8081
serviceAccountName: ""
serviceAccountName: ""
ingress:
ingress:
annotations: {}
annotations: {}
enabled: false
enabled: false
extraPaths: []
extraPaths: []
hosts:
hosts:
- chart-example.local
- chart-example.local
labels: {}
labels: {}
path: /
path: /
pathType: Prefix
pathType: Prefix
tls: []
tls: []
initChownData:
initChownData:
enabled: true
enabled: true
image:
image:
pullPolicy: IfNotPresent
pullPolicy: IfNotPresent
repository: busybox
repository: busybox
sha: ""
sha: ""
tag: 1.31.1
tag: 1.31.1
resources: {}
resources: {}
ldap:
ldap:
config: ""
config: ""
enabled: false
enabled: false
existingSecret: ""
existingSecret: ""
livenessProbe:
livenessProbe:
failureThreshold: 10
failureThreshold: 10
httpGet:
httpGet:
path: /api/health
path: /api/health
port: 3000
port: 3000
initialDelaySeconds: 60
initialDelaySeconds: 60
timeoutSeconds: 30
timeoutSeconds: 30
namespaceOverride: ""
namespaceOverride: ""
nodeSelector: {}
nodeSelector: {}
notifiers: {}
notifiers: {}
persistence:
persistence:
accessModes:
accessModes:
- ReadWriteOnce
- ReadWriteOnce
enabled: true
enabled: true
finalizers:
finalizers:
- kubernetes.io/pvc-protection
- kubernetes.io/pvc-protection
inMemory:
inMemory:
enabled: false
enabled: false
size: 1Gi
size: 1Gi
type: pvc
type: pvc
plugins: []
plugins: []
podDisruptionBudget: {}
podDisruptionBudget: {}
podPortName: grafana
podPortName: grafana
rbac:
rbac:
create: true
create: true
extraClusterRoleRules: []
extraClusterRoleRules: []
extraRoleRules: []
extraRoleRules: []
namespaced: false
namespaced: false
pspEnabled: true
pspEnabled: true
pspUseAppArmor: true
pspUseAppArmor: true
readinessProbe:
readinessProbe:
httpGet:
httpGet:
path: /api/health
path: /api/health
port: 3000
port: 3000
replicas: 1
replicas: 1
resources: {}
resources: {}
revisionHistoryLimit: 10
revisionHistoryLimit: 10
securityContext:
securityContext:
fsGroup: 472
fsGroup: 472
runAsGroup: 472
runAsGroup: 472
runAsUser: 472
runAsUser: 472
service:
service:
annotations: {}
annotations: {}
enabled: true
enabled: true
labels: {}
labels: {}
port: 80
port: 80
portName: service
portName: service
targetPort: 3000
targetPort: 3000
type: ClusterIP
type: ClusterIP
serviceAccount:
serviceAccount:
autoMount: true
autoMount: true
create: true
create: true
name: null
name: null
nameTest: null
nameTest: null
serviceMonitor:
serviceMonitor:
enabled: false
enabled: false
interval: 1m
interval: 1m
labels: {}
labels: {}
path: /metrics
path: /metrics
relabelings: []
relabelings: []
scheme: http
scheme: http
scrapeTimeout: 30s
scrapeTimeout: 30s
tlsConfig: {}
tlsConfig: {}
sidecar:
sidecar:
dashboards:
dashboards:
SCProvider: true
SCProvider: true
defaultFolderName: null
defaultFolderName: null
enabled: false
enabled: false
folder: /tmp/dashboards
folder: /tmp/dashboards
folderAnnotation: null
folderAnnotation: null
label: grafana_dashboard
label: grafana_dashboard
labelValue: null
labelValue: null
provider:
provider:
allowUiUpdates: false
allowUiUpdates: false
disableDelete: false
disableDelete: false
folder: ""
folder: ""
foldersFromFilesStructure: false
foldersFromFilesStructure: false
name: sidecarProvider
name: sidecarProvider
orgid: 1
orgid: 1
type: file
type: file
resource: both
resource: both
searchNamespace: null
searchNamespace: null
datasources:
datasources:
enabled: false
enabled: false
label: grafana_datasource
label: grafana_datasource
labelValue: null
labelValue: null
resource: both
resource: both
searchNamespace: null
searchNamespace: null
enableUniqueFilenames: false
enableUniqueFilenames: false
image:
image:
repository: quay.io/kiwigrid/k8s-sidecar
repository: quay.io/kiwigrid/k8s-sidecar
sha: ""
sha: ""
tag: 1.12.3
tag: 1.12.3
imagePullPolicy: IfNotPresent
imagePullPolicy: IfNotPresent
notifiers:
notifiers:
enabled: false
enabled: false
label: grafana_notifier
label: grafana_notifier
resource: both
resource: both
searchNamespace: null
searchNamespace: null
resources: {}
resources: {}
smtp:
smtp:
existingSecret: ""
existingSecret: ""
passwordKey: password
passwordKey: password
userKey: user
userKey: user
testFramework:
testFramework:
enabled: true
enabled: true
image: bats/bats
image: bats/bats
imagePullPolicy: IfNotPresent
imagePullPolicy: IfNotPresent
securityContext: {}
securityContext: {}
tag: v1.1.0
tag: v1.1.0
tolerations: []
tolerations: []


HOOKS:
HOOKS:
---
---
# Source: grafana/templates/tests/test.yaml
# Source: grafana/templates/tests/test.yaml
apiVersion: v1
apiVersion: v1
kind: Pod
kind: Pod
metadata:
metadata:
name: grafana-test
name: grafana-test
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
annotations:
annotations:
"helm.sh/hook": test-success
"helm.sh/hook": test-success
namespace: grassroots
namespace: grassroots
spec:
spec:
serviceAccountName: grafana-test
serviceAccountName: grafana-test
containers:
containers:
- name: grafana-test
- name: grafana-test
image: "bats/bats:v1.1.0"
image: "bats/bats:v1.1.0"
imagePullPolicy: "IfNotPresent"
imagePullPolicy: "IfNotPresent"
command: ["/opt/bats/bin/bats", "-t", "/tests/run.sh"]
command: ["/opt/bats/bin/bats", "-t", "/tests/run.sh"]
volumeMounts:
volumeMounts:
- mountPath: /tests
- mountPath: /tests
name: tests
name: tests
readOnly: true
readOnly: true
volumes:
volumes:
- name: tests
- name: tests
configMap:
configMap:
name: grafana-test
name: grafana-test
restartPolicy: Never
restartPolicy: Never
MANIFEST:
MANIFEST:
---
---
# Source: grafana/templates/podsecuritypolicy.yaml
# Source: grafana/templates/podsecuritypolicy.yaml
apiVersion: policy/v1beta1
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
kind: PodSecurityPolicy
metadata:
metadata:
name: grafana
name: grafana
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
annotations:
annotations:
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
spec:
spec:
privileged: false
privileged: false
allowPrivilegeEscalation: false
allowPrivilegeEscalation: false
requiredDropCapabilities:
requiredDropCapabilities:
# Default set from Docker, with DAC_OVERRIDE and CHOWN
# Default set from Docker, with DAC_OVERRIDE and CHOWN
- ALL
- ALL
volumes:
volumes:
- 'configMap'
- 'configMap'
- 'emptyDir'
- 'emptyDir'
- 'projected'
- 'projected'
- 'csi'
- 'csi'
- 'secret'
- 'secret'
- 'downwardAPI'
- 'downwardAPI'
- 'persistentVolumeClaim'
- 'persistentVolumeClaim'
hostNetwork: false
hostNetwork: false
hostIPC: false
hostIPC: false
hostPID: false
hostPID: false
runAsUser:
runAsUser:
rule: 'RunAsAny'
rule: 'RunAsAny'
seLinux:
seLinux:
rule: 'RunAsAny'
rule: 'RunAsAny'
supplementalGroups:
supplementalGroups:
rule: 'MustRunAs'
rule: 'MustRunAs'
ranges:
ranges:
# Forbid adding the root group.
# Forbid adding the root group.
- min: 1
- min: 1
max: 65535
max: 65535
fsGroup:
fsGroup:
rule: 'MustRunAs'
rule: 'MustRunAs'
ranges:
ranges:
# Forbid adding the root group.
# Forbid adding the root group.
- min: 1
- min: 1
max: 65535
max: 65535
readOnlyRootFilesystem: false
readOnlyRootFilesystem: false
---
---
# Source: grafana/templates/tests/test-podsecuritypolicy.yaml
# Source: grafana/templates/tests/test-podsecuritypolicy.yaml
apiVersion: policy/v1beta1
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
kind: PodSecurityPolicy
metadata:
metadata:
name: grafana-test
name: grafana-test
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
spec:
spec:
allowPrivilegeEscalation: true
allowPrivilegeEscalation: true
privileged: false
privileged: false
hostNetwork: false
hostNetwork: false
hostIPC: false
hostIPC: false
hostPID: false
hostPID: false
fsGroup:
fsGroup:
rule: RunAsAny
rule: RunAsAny
seLinux:
seLinux:
rule: RunAsAny
rule: RunAsAny
supplementalGroups:
supplementalGroups:
rule: RunAsAny
rule: RunAsAny
runAsUser:
runAsUser:
rule: RunAsAny
rule: RunAsAny
volumes:
volumes:
- configMap
- configMap
- downwardAPI
- downwardAPI
- emptyDir
- emptyDir
- projected
- projected
- csi
- csi
- secret
- secret
---
---
# Source: grafana/templates/serviceaccount.yaml
# Source: grafana/templates/serviceaccount.yaml
apiVersion: v1
apiVersion: v1
kind: ServiceAccount
kind: ServiceAccount
metadata:
metadata:
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
---
---
# Source: grafana/templates/tests/test-serviceaccount.yaml
# Source: grafana/templates/tests/test-serviceaccount.yaml
apiVersion: v1
apiVersion: v1
kind: ServiceAccount
kind: ServiceAccount
metadata:
metadata:
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
name: grafana-test
name: grafana-test
namespace: grassroots
namespace: grassroots
---
---
# Source: grafana/templates/secret.yaml
# Source: grafana/templates/secret.yaml
apiVersion: v1
apiVersion: v1
kind: Secret
kind: Secret
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
type: Opaque
type: Opaque
data:
data:
admin-user: "YWRtaW4="
admin-user: "YWRtaW4="
admin-password: Y29KTDRxbUZZcUZJR3FpdTVrbllIMjhDMVp3N3RRUElGQzc1V0x1Qw==
admin-password: Y29KTDRxbUZZcUZJR3FpdTVrbllIMjhDMVp3N3RRUElGQzc1V0x1Qw==
ldap-toml: ""
ldap-toml: ""
---
---
# Source: grafana/templates/configmap.yaml
# Source: grafana/templates/configmap.yaml
apiVersion: v1
apiVersion: v1
kind: ConfigMap
kind: ConfigMap
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
data:
data:
grafana.ini: |
grafana.ini: |
[analytics]
[analytics]
check_for_updates = true
check_for_updates = true
[grafana_net]
[grafana_net]
url = https://grafana.net
url = https://grafana.net
[log]
[log]
mode = console
mode = console
[paths]
[paths]
data = /var/lib/grafana/
data = /var/lib/grafana/
logs = /var/log/grafana
logs = /var/log/grafana
plugins = /var/lib/grafana/plugins
plugins = /var/lib/grafana/plugins
provisioning = /etc/grafana/provisioning
provisioning = /etc/grafana/provisioning
---
---
# Source: grafana/templates/tests/test-configmap.yaml
# Source: grafana/templates/tests/test-configmap.yaml
apiVersion: v1
apiVersion: v1
kind: ConfigMap
kind: ConfigMap
metadata:
metadata:
name: grafana-test
name: grafana-test
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
data:
data:
run.sh: |-
run.sh: |-
@test "Test Health" {
@test "Test Health" {
url="http://grafana/api/health"
url="http://grafana/api/health"


code=$(wget --server-response --spider --timeout 10 --tries 1 ${url} 2>&1 | awk '/^ HTTP/{print $2}')
code=$(wget --server-response --spider --timeout 10 --tries 1 ${url} 2>&1 | awk '/^ HTTP/{print $2}')
[ "$code" == "200" ]
[ "$code" == "200" ]
}
}
---
---
# Source: grafana/templates/pvc.yaml
# Source: grafana/templates/pvc.yaml
apiVersion: v1
apiVersion: v1
kind: PersistentVolumeClaim
kind: PersistentVolumeClaim
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
finalizers:
finalizers:
- kubernetes.io/pvc-protection
- kubernetes.io/pvc-protection
spec:
spec:
accessModes:
accessModes:
- "ReadWriteOnce"
- "ReadWriteOnce"
resources:
resources:
requests:
requests:
storage: "1Gi"
storage: "1Gi"
---
---
# Source: grafana/templates/clusterrole.yaml
# Source: grafana/templates/clusterrole.yaml
kind: ClusterRole
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
metadata:
metadata:
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
name: grafana-clusterrole
name: grafana-clusterrole
rules: []
rules: []
---
---
# Source: grafana/templates/clusterrolebinding.yaml
# Source: grafana/templates/clusterrolebinding.yaml
kind: ClusterRoleBinding
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
metadata:
metadata:
name: grafana-clusterrolebinding
name: grafana-clusterrolebinding
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
subjects:
subjects:
- kind: ServiceAccount
- kind: ServiceAccount
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
roleRef:
roleRef:
kind: ClusterRole
kind: ClusterRole
name: grafana-clusterrole
name: grafana-clusterrole
apiGroup: rbac.authorization.k8s.io
apiGroup: rbac.authorization.k8s.io
---
---
# Source: grafana/templates/role.yaml
# Source: grafana/templates/role.yaml
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
kind: Role
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
rules:
rules:
- apiGroups: ['extensions']
- apiGroups: ['extensions']
resources: ['podsecuritypolicies']
resources: ['podsecuritypolicies']
verbs: ['use']
verbs: ['use']
resourceNames: [grafana]
resourceNames: [grafana]
---
---
# Source: grafana/templates/tests/test-role.yaml
# Source: grafana/templates/tests/test-role.yaml
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
kind: Role
metadata:
metadata:
name: grafana-test
name: grafana-test
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
rules:
rules:
- apiGroups: ['policy']
- apiGroups: ['policy']
resources: ['podsecuritypolicies']
resources: ['podsecuritypolicies']
verbs: ['use']
verbs: ['use']
resourceNames: [grafana-test]
resourceNames: [grafana-test]
---
---
# Source: grafana/templates/rolebinding.yaml
# Source: grafana/templates/rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
kind: RoleBinding
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
roleRef:
roleRef:
apiGroup: rbac.authorization.k8s.io
apiGroup: rbac.authorization.k8s.io
kind: Role
kind: Role
name: grafana
name: grafana
subjects:
subjects:
- kind: ServiceAccount
- kind: ServiceAccount
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
---
---
# Source: grafana/templates/tests/test-rolebinding.yaml
# Source: grafana/templates/tests/test-rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
kind: RoleBinding
metadata:
metadata:
name: grafana-test
name: grafana-test
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
roleRef:
roleRef:
apiGroup: rbac.authorization.k8s.io
apiGroup: rbac.authorization.k8s.io
kind: Role
kind: Role
name: grafana-test
name: grafana-test
subjects:
subjects:
- kind: ServiceAccount
- kind: ServiceAccount
name: grafana-test
name: grafana-test
namespace: grassroots
namespace: grassroots
---
---
# Source: grafana/templates/service.yaml
# Source: grafana/templates/service.yaml
apiVersion: v1
apiVersion: v1
kind: Service
kind: Service
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
spec:
spec:
type: ClusterIP
type: ClusterIP
ports:
ports:
- name: service
- name: service
port: 80
port: 80
protocol: TCP
protocol: TCP
targetPort: 3000
targetPort: 3000


selector:
selector:
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
---
---
# Source: grafana/templates/deployment.yaml
# Source: grafana/templates/deployment.yaml
apiVersion: apps/v1
apiVersion: apps/v1
kind: Deployment
kind: Deployment
metadata:
metadata:
name: grafana
name: grafana
namespace: grassroots
namespace: grassroots
labels:
labels:
helm.sh/chart: grafana-6.16.10
helm.sh/chart: grafana-6.16.10
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/version: "8.1.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/managed-by: Helm
spec:
spec:
replicas: 1
replicas: 1
revisionHistoryLimit: 10
revisionHistoryLimit: 10
selector:
selector:
matchLabels:
matchLabels:
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
strategy:
strategy:
type: RollingUpdate
type: RollingUpdate
template:
template:
metadata:
metadata:
labels:
labels:
app.kubernetes.io/name: grafana
app.kubernetes.io/name: grafana
app.kubernetes.io/instance: grafana
app.kubernetes.io/instance: grafana
annotations:
annotations:
checksum/config: b79556bb24b1519ca331836b5b0ae8688e25eb8daff49f980bab0625352f5603
checksum/config: b79556bb24b1519ca331836b5b0ae8688e25eb8daff49f980bab0625352f5603
checksum/dashboards-json-config: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
checksum/dashboards-json-config: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
checksum/sc-dashboard-provider-config: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
checksum/sc-dashboard-provider-config: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
checksum/secret: 2c6d56a1c4928b7a1e2ba914b14f87454aecb893eae9a9a79543e9607ae13c4b
checksum/secret: 2c6d56a1c4928b7a1e2ba914b14f87454aecb893eae9a9a79543e9607ae13c4b
spec:
spec:
serviceAccountName: grafana
serviceAccountName: grafana
automountServiceAccountToken: true
automountServiceAccountToken: true
securityContext:
securityContext:
fsGroup: 472
fsGroup: 472
runAsGroup: 472
runAsGroup: 472
runAsUser: 472
runAsUser: 472
initContainers:
initContainers:
- name: init-chown-data
- name: init-chown-data
image: "busybox:1.31.1"
image: "busybox:1.31.1"
imagePullPolicy: IfNotPresent
imagePullPolicy: IfNotPresent
securityContext:
securityContext:
runAsNonRoot: false
runAsNonRoot: false
runAsUser: 0
runAsUser: 0
command: ["chown", "-R", "472:472", "/var/lib/grafana"]
command: ["chown", "-R", "472:472", "/var/lib/grafana"]
resources:
resources:
{}
{}
volumeMounts:
volumeMounts:
- name: storage
- name: storage
mountPath: "/var/lib/grafana"
mountPath: "/var/lib/grafana"
enableServiceLinks: true
enableServiceLinks: true
containers:
containers:
- name: grafana
- name: grafana
image: "grafana/grafana:8.1.5"
image: "grafana/grafana:8.1.5"
imagePullPolicy: IfNotPresent
imagePullPolicy: IfNotPresent
volumeMounts:
volumeMounts:
- name: config
- name: config
mountPath: "/etc/grafana/grafana.ini"
mountPath: "/etc/grafana/grafana.ini"
subPath: grafana.ini
subPath: grafana.ini
- name: storage
- name: storage
mountPath: "/var/lib/grafana"
mountPath: "/var/lib/grafana"
ports:
ports:
- name: service
- name: service
containerPort: 80
containerPort: 80
protocol: TCP
protocol: TCP
- name: grafana
- name: grafana
containerPort: 3000
containerPort: 3000
protocol: TCP
protocol: TCP
env:
env:
- name: GF_SECURITY_ADMIN_USER
- name: GF_SECURITY_ADMIN_USER
valueFrom:
valueFrom:
secretKeyRef:
secretKeyRef:
name: grafana
name: grafana
key: admin-user
key: admin-user
- name: GF_SECURITY_ADMIN_PASSWORD
- name: GF_SECURITY_ADMIN_PASSWORD
valueFrom:
valueFrom:
secretKeyRef:
secretKeyRef:
name: grafana
name: grafana
key: admin-password
key: admin-password
- name: GF_PATHS_DATA
- name: GF_PATHS_DATA
value: /var/lib/grafana/
value: /var/lib/grafana/
- name: GF_PATHS_LOGS
- name: GF_PATHS_LOGS
value: /var/log/grafana
value: /var/log/grafana
- name: GF_PATHS_PLUGINS
- name: GF_PATHS_PLUGINS
value: /var/lib/grafana/plugins
value: /var/lib/grafana/plugins
- name: GF_PATHS_PROVISIONING
- name: GF_PATHS_PROVISIONING
value: /etc/grafana/provisioning
value: /etc/grafana/provisioning
livenessProbe:
livenessProbe:
failureThreshold: 10
failureThreshold: 10
httpGet:
httpGet:
path: /api/health
path: /api/health
port: 3000
port: 3000
initialDelaySeconds: 60
initialDelaySeconds: 60
timeoutSeconds: 30
timeoutSeconds: 30
readinessProbe:
readinessProbe:
httpGet:
httpGet:
path: /api/health
path: /api/health
port: 3000
port: 3000
resources:
resources:
{}
{}
volumes:
volumes:
- name: config
- name: config
configMap:
configMap:
name: grafana
name: grafana
- name: storage
- name: storage
persistentVolumeClaim:
persistentVolumeClaim:
claimName: grafana
claimName: grafana


NOTES:
NOTES:
1. Get your 'admin' user password by running:
1. Get your 'admin' user password by running:


kubectl get secret --namespace grassroots grafana -o jsonpath="{.data.admin-password}" | base64 --decode ; echo
kubectl get secret --namespace grassroots grafana -o jsonpath="{.data.admin-password}" | base64 --decode ; echo


2. The Grafana server can be accessed via port 80 on the following DNS name from within your cluster:
2. The Grafana server can be accessed via port 80 on the following DNS name from within your cluster:


grafana.grassroots.svc.cluster.local
grafana.grassroots.svc.cluster.local


Get the Grafana URL to visit by running these commands in the same shell:
Get the Grafana URL to visit by running these commands in the same shell:


export POD_NAME=$(kubectl get pods --namespace grassroots -l "app.kubernetes.io/name=grafana,app.kubernetes.io/instance=grafana" -o jsonpath="{.items[0].metadata.name}")
export POD_NAME=$(kubectl get pods --namespace grassroots -l "app.kubernetes.io/name=grafana,app.kubernetes.io/instance=grafana" -o jsonpath="{.items[0].metadata.name}")
kubectl --namespace grassroots port-forward $POD_NAME 3000
kubectl --namespace grassroots port-forward $POD_NAME 3000


3. Login with the password from step 1 and the username: admin
3. Login with the password from step 1 and the username: admin
2021-10-01 09:45:40 NOTICE: Finished: Upgrade release [ grafana ] to version [ 6.16.10 ] in namespace [ grassroots ]
2021-10-01 09:48:11 NOTICE: Finished: Upgrade release [ grafana ] to version [ 6.16.10 ] in namespace [ grassroots ]
2021-10-01 09:45:40 DEBUG: kubectl label --overwrite secret -n grassroots -l owner=helm,name=grafana MANAGED-BY=HELMSMAN NAMESPACE=grassroots HELMSMAN_CONTEXT=default
2021-10-01 09:48:11 DEBUG: kubectl label --overwrite secret -n grassroots -l owner=helm,name=grafana MANAGED-BY=HELMSMAN NAMESPACE=grassroots HELMSMAN_CONTEXT=default
2021-10-01 09:45:42 INFO: Plan applied
2021-10-01 09:48:13 INFO: Plan applied