fix

monitor/grafana/config.tf

@@ -34,6 +34,7 @@ org_role = Viewer
 enabled = true
 name = vynil
 scopes = openid profile email
+${var.issuer=="letsencrypt-prod"?"#":""}tls_client_ca = /etc/local-certs/ca.crt
 client_id = '${module.oauth2.client_id}'
 client_secret = '${module.oauth2.client_secret}'
 auth_url = '${module.oauth2.sso_authorize_url}'

monitor/grafana/datas.tf

@@ -86,6 +86,18 @@ data "kustomization_overlay" "data" {
         name: grafana
         annotations:
           configmap.reloader.stakater.com/reload: "grafana"
-    EOF
+spec:
+  template:
+    spec:
+      containers:
+        - name: grafana
+          volumeMounts:
+            - name: local-certs
+              mountPath: "/etc/local-certs"
+      volumes:
+      - name: local-certs
+        secret:
+          secretName: "${var.instance}-cert"
+          defaultMode: 0444
   }
 }

monitor/grafana/index.yaml

@@ -6,11 +6,25 @@ metadata:
   name: grafana
   description: null
 options:
-  ingress-class:
-    default: traefik
+  volume:
+    default:
+      accessMode: ReadWriteOnce
+      size: 10Gi
     examples:
-    - traefik
-    type: string
+    - accessMode: ReadWriteOnce
+      size: 10Gi
+    properties:
+      accessMode:
+        default: ReadWriteOnce
+        enum:
+        - ReadWriteOnce
+        - ReadOnlyMany
+        - ReadWriteMany
+        type: string
+      size:
+        default: 10Gi
+        type: string
+    type: object
   app-group:
     default: monitor
     examples:
@@ -21,6 +35,21 @@ options:
     examples:
     - grafana
     type: string
+  issuer:
+    default: letsencrypt-prod
+    examples:
+    - letsencrypt-prod
+    type: string
+  domain:
+    default: your-company
+    examples:
+    - your-company
+    type: string
+  admin_name:
+    default: grafana_admin
+    examples:
+    - grafana_admin
+    type: string
   images:
     default:
       busybox:
@@ -118,40 +147,11 @@ options:
             type: string
         type: object
     type: object
-  admin_name:
-    default: grafana_admin
+  ingress-class:
+    default: traefik
     examples:
-    - grafana_admin
+    - traefik
     type: string
-  domain:
-    default: your-company
-    examples:
-    - your-company
-    type: string
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
-  volume:
-    default:
-      accessMode: ReadWriteOnce
-      size: 10Gi
-    examples:
-    - accessMode: ReadWriteOnce
-      size: 10Gi
-    properties:
-      accessMode:
-        default: ReadWriteOnce
-        enum:
-        - ReadWriteOnce
-        - ReadOnlyMany
-        - ReadWriteMany
-        type: string
-      size:
-        default: 10Gi
-        type: string
-    type: object
   domain-name:
     default: your_company.com
     examples: