From d446e86ece219e5bc42e177d7a2fbf7be96e65f4 Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Sun, 22 Mar 2026 00:43:21 +0000
Subject: [PATCH] fix: use static grafana password, remove externalsecret
 dependency

---
 infrastructure/addons/kustomization-observability.yaml       | 2 +-
 .../observability/helmrelease-kube-prometheus-stack.yaml     | 5 ++---
 infrastructure/addons/observability/kustomization.yaml       | 2 +-
 3 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/infrastructure/addons/kustomization-observability.yaml b/infrastructure/addons/kustomization-observability.yaml
index 0c0176e..877d5b6 100644
--- a/infrastructure/addons/kustomization-observability.yaml
+++ b/infrastructure/addons/kustomization-observability.yaml
@@ -13,5 +13,5 @@ spec:
   dependsOn:
     - name: addon-external-secrets
   wait: true
-  timeout: 10m
+  timeout: 5m
   suspend: false
diff --git a/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml b/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml
index 17729c4..d6a05fd 100644
--- a/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml
+++ b/infrastructure/addons/observability/helmrelease-kube-prometheus-stack.yaml
@@ -25,9 +25,8 @@ spec:
     grafana:
       enabled: true
       admin:
-        existingSecret: grafana-admin-credentials
-        userKey: admin-user
-        passwordKey: admin-password
+        user: admin
+        password: admin123
       grafana.ini:
         server:
           root_url: http://observability/grafana/
diff --git a/infrastructure/addons/observability/kustomization.yaml b/infrastructure/addons/observability/kustomization.yaml
index 84fb6d4..b4acaef 100644
--- a/infrastructure/addons/observability/kustomization.yaml
+++ b/infrastructure/addons/observability/kustomization.yaml
@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace.yaml
-  - grafana-admin-externalsecret.yaml
+  # - grafana-admin-externalsecret.yaml  # Using static password for stable baseline
   # - traefik-tailscale-service.yaml  # Deferred - complex dependency on tailscale operator
   # - grafana-ingress.yaml  # Deferred - requires tailscale service
   # - prometheus-ingress.yaml  # Deferred - requires tailscale service