Skip to content

Commit

Permalink
fix: disable leaked secrets assertion on grafana.ini
Browse files Browse the repository at this point in the history
This is a workaround while we are implementing a better architecture for managing secrets in the DevOps Stack. One that milestone is accomplished, we will better manage the way we pass these values.

See:
- https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#override-configuration-with-environment-variables
- grafana/helm-charts#2896
  • Loading branch information
lentidas committed Apr 12, 2024
1 parent f4e52ec commit 8d2c1c2
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion locals.tf
Original file line number Diff line number Diff line change
Expand Up @@ -185,7 +185,11 @@ locals {
enabled = local.alertmanager.enabled
})
grafana = merge(local.grafana.enabled ? {
adminPassword = "${replace(local.grafana.admin_password, "\"", "\\\"")}"
# TODO Remove the `assertNoLeakedSecrets when we start properly managing them:
# - https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#override-configuration-with-environment-variables
# - https://github.com/grafana/helm-charts/issues/2896
assertNoLeakedSecrets = false
adminPassword = "${replace(local.grafana.admin_password, "\"", "\\\"")}"
"grafana.ini" = {
"auth.generic_oauth" = merge({
enabled = true
Expand Down

0 comments on commit 8d2c1c2

Please sign in to comment.