k8s中kibana集成ldap和安装饼图插件

集成ldap和添加饼图插件都需要重启容器

1、创建configmap

apiVersion: v1
kind: ConfigMap
metadata:
  name: ldap-config
  namespace: monitoring
data:
  ldap.toml: |-
    # To troubleshoot and get more log info enable ldap debug logging in grafana.ini
    # [log]
    # filters = ldap:debug    

    [[servers]]
    # Ldap server host (specify multiple hosts space separated)
    host = "172.16.0.16"
    # Default port is 389 or 636 if use_ssl = true
    port = 389
    # Set to true if LDAP server should use an encrypted TLS connection (either with STARTTLS or LDAPS)
    use_ssl = false
    # If set to true, use LDAP with STARTTLS instead of LDAPS
    start_tls = false
    # set to true if you want to skip ssl cert validation
    ssl_skip_verify = false
    # set to the path to your root CA certificate or leave unset to use system defaults
    # root_ca_cert = "/path/to/certificate.crt"
    # Authentication against LDAP servers requiring client certificates
    # client_cert = "/path/to/client.crt"
    # client_key = "/path/to/client.key"    

    # Search user bind dn
    bind_dn = "cn=admin,dc=infinitas,dc=group"
    # Search user bind password
    # If the password contains # or ; you have to wrap it with triple quotes. Ex """#password;"""
    bind_password = '111111111111j'    

    # User search filter, for example "(cn=%s)" or "(sAMAccountName=%s)" or "(uid=%s)"
    search_filter = "(uid=%s)"    

    # An array of base dns to search through
    search_base_dns = ["dc=infinitas,dc=group"]    

    ## For Posix or LDAP setups that does not support member_of attribute you can define the below settings
    ## Please check grafana LDAP docs for examples
    # group_search_filter = "(&(objectClass=posixGroup)(memberUid=%s))"
    # group_search_base_dns = ["ou=groups,dc=grafana,dc=org"]
    # group_search_filter_user_attribute = "uid"    

    # Specify names of the ldap attributes your ldap uses
    [servers.attributes]
    name = "uid"
    surname = "sn"
    username = "cn"
    member_of = "dn"
    email =  "email"    

    # Map ldap groups to grafana org roles
    #[[servers.group_mappings]]
    #group_dn = "ou=ops,ou=tech,dc=infinitas,dc=group"
    #org_role = "Admin"
    # To make user an instance admin  (Grafana Admin) uncomment line below
    # grafana_admin = true
    # The Grafana organization database id, optional, if left out the default org (id 1) will be used
    # org_id = 1    

    #[[servers.group_mappings]]
    #group_dn = "cn=users,ou=groups,dc=grafana,dc=org"
    #org_role = "Editor"    

    [[servers.group_mappings]]
    # If you want to match all (or no ldap groups) then you can use wildcard
    group_dn = "*"
    org_role = "Viewer"

2、修改grafana的yaml，增加configmap的mouthPath的配置

      - configMap:
          name: ldap-config
         name: grafana-ldap-grafana
      - configMap:
          name: grafana-config-ini
        name: grafana-ini


        - mountPath: /etc/grafana/ldap.toml
          name: grafana-ldap-grafana
          subPath: ldap.toml
          readOnly: false
        - mountPath: /etc/grafana/grafana.ini
          name: grafana-ini
          subPath: grafana.ini
          readOnly: false

配置饼图

# grafana支持饼图
grafana-cli plugins install grafana-piechart-panel
# 重启grafana
kubectl -n monitoring rollout restart deployment grafana