grafana-ss.yml

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: grafana
  labels:
    component: grafana
    role: grafana
spec:
  serviceName: grafana
  replicas: 2
  updateStrategy:
    type: OnDelete
  selector:
    matchLabels:
      component: grafana
      role: grafana
  template:
    metadata:
      labels:
        component: grafana
        role: grafana
    spec:
      initContainers:
        - name: plugins-volume-permissions-fix
          image: alpine:latest
          command: ["/bin/sh", "-c"]
          args:
            - chown 472:472 /plugins;
          volumeMounts:
            - name: plugins
              mountPath: /plugins
              subPath: grafana-plugins
      containers:
      - name: grafana
        image: grafana/grafana:6.5.2
        securityContext:
          runAsUser: 0
        resources:
          requests:
            cpu: 4
            memory: 4Gi
          limits:
            cpu: 4
            memory: 4Gi
        ports:
        - containerPort: 3000
          name: http
        env:
        - name: GRAFANA_DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: grafana-secret
              key: mysql-db-pwd
        - name: OIDC_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: openid-secret
              key: oidc-client-secret
        volumeMounts:
          - name: config
            mountPath: /etc/grafana/grafana.ini
            subPath: grafana.ini
          - name: plugins
            mountPath: /var/lib/grafana/plugins
            subPath: grafana-plugins
      volumes:
        - name: config
          configMap:
            name: grafana-conf
        - name: plugins
          persistentVolumeClaim:
            claimName: plugin-libraries