From a1b9fe6aa6e29b194e58ae55ecb16035e8d7701d Mon Sep 17 00:00:00 2001 From: MichaelFisher1997 Date: Tue, 31 Mar 2026 23:40:54 +0000 Subject: [PATCH] fix: Use Flux valuesFrom to inject Doppler Grafana creds as Helm values Switch from admin.existingSecret to valuesFrom so Flux reads the Doppler-managed secret and injects credentials as standard Helm values. --- .../helmrelease-kube-prometheus-stack.yaml | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml b/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml index a364dda..8642da9 100644 --- a/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml +++ b/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml @@ -21,11 +21,18 @@ spec: upgrade: remediation: retries: 3 + valuesFrom: + - kind: Secret + name: grafana-admin-credentials + valuesKey: admin-user + targetPath: grafana.admin.user + - kind: Secret + name: grafana-admin-credentials + valuesKey: admin-password + targetPath: grafana.admin.password values: grafana: enabled: true - admin: - existingSecret: grafana-admin-credentials grafana.ini: server: root_url: http://grafana.silverside-gopher.ts.net/