Add read-only production runtime audit

2026-08-17 11:17:40 +07:00
parent 057d4ed9dc
commit a1de4715a4
106 changed files with 6869 additions and 1782 deletions
@@ -23,6 +23,14 @@ spec:
              service:
                name: {{ include "medical-chatbot.fullname" . }}-ai-service
                port: { name: http }
+          {{- if .Values.observability.enabled }}
+          - path: /grafana
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "medical-chatbot.fullname" . }}-grafana
+                port: { name: http }
+          {{- end }}
          - path: /
            pathType: Prefix
            backend:
@@ -242,6 +242,12 @@ spec:
              value: Admin
            - name: GF_AUTH_DISABLE_LOGIN_FORM
              value: {{ .Values.observability.grafana.anonymousAdmin | quote }}
+            {{- if .Values.ingress.enabled }}
+            - name: GF_SERVER_ROOT_URL
+              value: "https://{{ .Values.ingress.host }}/grafana/"
+            - name: GF_SERVER_SERVE_FROM_SUB_PATH
+              value: "true"
+            {{- end }}
          readinessProbe:
            httpGet: { path: /api/health, port: http }
            initialDelaySeconds: 10