From 39a8e551eb9975ad7916fc54fb2530559ff56b53 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 24 Dec 2025 17:43:07 -0300
Subject: [PATCH] grafana: allow public overview via oidc

---
 services/monitoring/grafana-folders.yaml | 2 ++
 services/monitoring/helmrelease.yaml     | 3 ++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/services/monitoring/grafana-folders.yaml b/services/monitoring/grafana-folders.yaml
index 54b278f..24ce305 100644
--- a/services/monitoring/grafana-folders.yaml
+++ b/services/monitoring/grafana-folders.yaml
@@ -13,6 +13,8 @@ data:
       - uid: overview
         title: Overview
         permissions:
+          - role: Anonymous
+            permission: View
           - role: Viewer
             permission: View
           - role: Editor
diff --git a/services/monitoring/helmrelease.yaml b/services/monitoring/helmrelease.yaml
index 3fd76db..d0bcda6 100644
--- a/services/monitoring/helmrelease.yaml
+++ b/services/monitoring/helmrelease.yaml
@@ -248,7 +248,8 @@ spec:
     service:
       type: ClusterIP
     env:
-      GF_AUTH_ANONYMOUS_ENABLED: "false"
+      GF_AUTH_ANONYMOUS_ENABLED: "true"
+      GF_AUTH_ANONYMOUS_ORG_ROLE: "Viewer"
       GF_SECURITY_ALLOW_EMBEDDING: "true"
       GF_AUTH_GENERIC_OAUTH_ENABLED: "true"
       GF_AUTH_GENERIC_OAUTH_NAME: "Keycloak"