diff --git a/.vuepress/public/statics/guide/proxy/kuboard_grafana_proxy_demo.yaml b/.vuepress/public/statics/guide/proxy/kuboard_grafana_proxy_demo.yaml new file mode 100644 index 0000000..e71bf16 --- /dev/null +++ b/.vuepress/public/statics/guide/proxy/kuboard_grafana_proxy_demo.yaml @@ -0,0 +1,88 @@ + +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + namespace: grafana-ns + name: monitor-grafana + annotations: + k8s.eip.work/workload: monitor-grafana + k8s.eip.work/displayName: Grafana + deployment.kubernetes.io/revision: '5' + k8s.eip.work/ingress: 'false' + k8s.eip.work/service: ClusterIP + labels: + k8s.eip.work/layer: monitor + k8s.eip.work/name: monitor-grafana +spec: + selector: + matchLabels: + k8s.eip.work/layer: monitor + k8s.eip.work/name: monitor-grafana + template: + metadata: + labels: + k8s.eip.work/layer: monitor + k8s.eip.work/name: monitor-grafana + spec: + securityContext: + seLinuxOptions: {} + imagePullSecrets: [] + restartPolicy: Always + initContainers: [] + containers: + - image: 'grafana/grafana:6.6.2' + imagePullPolicy: Always + name: grafana + volumeMounts: + - name: grafana-volume + mountPath: /var/lib/grafana + subPath: grafana + resources: + limits: + requests: + env: + - name: GF_SERVER_ROOT_URL + value: '/proxy/http/grafana-ns/monitor-grafana/:/3000/' + - name: GF_AUTH_PROXY_ENABLED + value: 'true' + - name: GF_SECURITY_ADMIN_USER + value: kuboard-user + ports: + - name: grafana + containerPort: 3000 + protocol: TCP + volumes: + - name: grafana-volume + persistentVolumeClaim: + claimName: grafana-pvc + terminationGracePeriodSeconds: 30 + replicas: 1 + +--- +apiVersion: v1 +kind: Service +metadata: + namespace: grafana-ns + name: monitor-grafana + annotations: + k8s.eip.work/workload: monitor-grafana + k8s.eip.work/displayName: Grafana + proxy.kuboard.cn/auth-header-groups-3000: X-WEBAUTH-GROUPS + proxy.kuboard.cn/auth-header-user-3000: X-WEBAUTH-USER + proxy.kuboard.cn/disable-rebase-3000: 'true' + labels: + k8s.eip.work/layer: monitor + k8s.eip.work/name: monitor-grafana +spec: + selector: + k8s.eip.work/layer: monitor + k8s.eip.work/name: monitor-grafana + type: ClusterIP + ports: + - port: 3000 + targetPort: 3000 + protocol: TCP + name: b5nffa + nodePort: 0 + diff --git a/guide/proxy/auth-proxy.md b/guide/proxy/auth-proxy.md index ccfffac..436fe7b 100644 --- a/guide/proxy/auth-proxy.md +++ b/guide/proxy/auth-proxy.md @@ -114,4 +114,10 @@ Kuboard Proxy 提供了 Auth Proxy 的功能,本文以 Grafana 为例,介绍 如果您使用 kuboard-user 登录,则您在 Grafana 中是系统管理员的角色,可以对 Grafana 做任何配置,截图如下所示: - ![image-20200308105924109](./auth-proxy.assets/image-20200308105924109.png) \ No newline at end of file + ![image-20200308105924109](./auth-proxy.assets/image-20200308105924109.png) + +## 直接导入 + +本文所创建的 Grafana 部署可以直接导入: +* 请在此处下载 kuboard_grafana_proxy_demo.yaml ; +* 请参考 [导入 example 微服务](/guide/example/import.html) 了解如何在 Kuboard 中导入配置。