Configure Grafana login with Tailscale IdP #220

Merged
alex merged 3 commits from wiring-guru/grafana-tsidp-client into main 2026-11-11 11:17:56 -07:00 AGit
Contributor

Depends on merged #219 (tsidp deployment). This MR changes only Grafana Generic OAuth configuration; it adds no sidecar, proxy settings, or ExternalSecret. The tsidp client and monitoring/grafana-tsidp Secret were created separately without disclosing values; do not re-register on merge. Redirect URI: https://grafana.alexmickelson.guru/login/generic_oauth. Grafana local login remains; new OAuth users are Viewer. Grafana pod connectivity to the private tsidp issuer and end-to-end login have not been verified, so review the risk before merging.

Depends on merged #219 (tsidp deployment). This MR changes only Grafana Generic OAuth configuration; it adds no sidecar, proxy settings, or ExternalSecret. The tsidp client and monitoring/grafana-tsidp Secret were created separately without disclosing values; do not re-register on merge. Redirect URI: https://grafana.alexmickelson.guru/login/generic_oauth. Grafana local login remains; new OAuth users are Viewer. Grafana pod connectivity to the private tsidp issuer and end-to-end login have not been verified, so review the risk before merging.
This client onboarding is separate from deployment of the issuer in PR #219. Preserve local Grafana login, assign new OAuth users Viewer, and keep the private issuer reachable using the existing proposed per-Grafana tailnet sidecar pending architectural review.
wiring-guru changed title from Configure Grafana login with Tailscale IdP to Configure Grafana login with Tailscale IdP (blocked by #219) 2026-11-11 10:15:32 -07:00
wiring-guru force-pushed wiring-guru/grafana-tsidp-client from 712778947a to 603a5075a2 2026-11-11 10:39:12 -07:00 Compare
wiring-guru changed title from Configure Grafana login with Tailscale IdP (blocked by #219) to Configure Grafana login with Tailscale IdP 2026-11-11 10:39:27 -07:00
wiring-guru force-pushed wiring-guru/grafana-tsidp-client from 603a5075a2 to 2f5282bb3c
All checks were successful
Apply Argo CD Applications / update-repo-folder (push) Successful in 1s
Apply Argo CD Applications / update-repo (push) Successful in 0s
Apply Argo CD Applications / apply-applications (push) Successful in 2s
2026-11-11 11:17:02 -07:00
Compare
alex merged commit 2f5282bb3c into main 2026-11-11 11:17:56 -07:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
alex/infrastructure!220
No description provided.