From 5e142d821e242779fc5fec5e8189fed80fe07701 Mon Sep 17 00:00:00 2001
From: Denis Arsh <denis.arsh@intel.com>
Date: Mon, 15 Jul 2024 12:31:58 +0300
Subject: [PATCH] grafana - disable login; anonymous user viewer

---
 pkg/app/dbs/tmpl/prom/grafana/dep.tpl | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pkg/app/dbs/tmpl/prom/grafana/dep.tpl b/pkg/app/dbs/tmpl/prom/grafana/dep.tpl
index 4d383748..08aedd83 100644
--- a/pkg/app/dbs/tmpl/prom/grafana/dep.tpl
+++ b/pkg/app/dbs/tmpl/prom/grafana/dep.tpl
@@ -49,11 +49,17 @@ spec:
           - name: GF_AUTH_ANONYMOUS_ENABLED
             value: "true"
           - name: GF_AUTH_ANONYMOUS_ORG_ROLE
-            value: Admin
+            value: Viewer
+          - name: GF_AUTH_ORG_ROLE
+            value: Viewer
           - name: GF_SECURITY_ALLOW_EMBEDDING
             value: "true"
           - name: GF_SERVER_HTTP_ADDR
             value: "0.0.0.0"
+          - name: GF_AUTH_DISABLE_LOGIN_FORM
+            value: "true"
+          - name: GF_DISABLE_INITIAL_ADMIN_CREATION
+            value: "true"
           - name: GF_SERVER_HTTP_PORT
             value: "{{ .Spec.Dbs.Prom.Grafana.Port }}"
         ports: