feat: add grafana dashboard to helm chart (#5230)

* feat: add grafana dashboard to helm chart

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* release note

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: treydock <tdockendorf@osc.edu>

charts/kyverno/Chart.yaml

@@ -50,3 +50,5 @@ annotations:
       description: Add startup probes support
     - kind: added
       description: Support extra CRD annotations
+    - kind: added
+      description: Grafana dashboard.

charts/kyverno/README.md

@@ -210,7 +210,10 @@ The command removes all the Kubernetes components associated with the chart and
 | networkPolicy.ingressFrom | list | `[]` | A list of valid from selectors according to https://kubernetes.io/docs/concepts/services-networking/network-policies. |
 | webhooksCleanup.enable | bool | `false` | Create a helm pre-delete hook to cleanup webhooks. |
 | webhooksCleanup.image | string | `"bitnami/kubectl:latest"` | `kubectl` image to run commands for deleting webhooks. |
-| tufRootMountPath | string | `"/.sigstore"` | A writable volume to use for the TUF root initialization |
+| tufRootMountPath | string | `"/.sigstore"` | A writable volume to use for the TUF root initialization. |
+| grafana.enabled | bool | `false` | Enable grafana dashboard creation. |
+| grafana.namespace | string | `nil` | Namespace to create the grafana dashboard configmap. If not set, it will be created in the same namespace where the chart is deployed. |
+| grafana.annotations | object | `{}` | Grafana dashboard configmap annotations. |
 
 ## TLS Configuration
 

charts/kyverno/templates/grafana.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.grafana.enabled -}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "kyverno.configMapName" . }}-grafana
+  namespace: {{ default (include "kyverno.namespace" .) .Values.grafana.namespace }}
+  annotations:
+    {{- toYaml .Values.grafana.annotations | nindent 4 }}
+  labels:
+    grafana_dashboard: "1"
+data:
+{{ (.Files.Glob "grafana/*").AsConfig | indent 2 }}
+{{- end -}}

charts/kyverno/values.yaml

@@ -464,5 +464,14 @@ webhooksCleanup:
   # -- `kubectl` image to run commands for deleting webhooks.
   image: bitnami/kubectl:latest
 
-# -- A writable volume to use for the TUF root initialization
+# -- A writable volume to use for the TUF root initialization.
 tufRootMountPath: /.sigstore
+
+grafana:
+  # -- Enable grafana dashboard creation.
+  enabled: false
+  # -- Namespace to create the grafana dashboard configmap.
+  # If not set, it will be created in the same namespace where the chart is deployed.
+  namespace:
+  # -- Grafana dashboard configmap annotations.
+  annotations: {}