feat: migrate prod and data grafana auth to the internal cloud zitadel (#1696)

Author: zackpollard

kubernetes/apps/monitoring/grafana/app/grafana.yaml

@@ -11,15 +11,17 @@ spec:
       root_url: https://monitoring.immich.cloud/
     database:
       wal: "true"
+    auth:
+      oauth_allow_insecure_email_lookup: "true"
     auth.generic_oauth:
       enabled: "true"
       client_id: ${quote}${GRAFANA_OAUTH_CLIENT_ID}${quote}
       client_secret: ''
       use_pkce: "true"
       scopes: openid email profile groups offline_access
-      auth_url: https://zitadel.internal.immich.cloud/oauth/v2/authorize
-      token_url: https://zitadel.internal.immich.cloud/oauth/v2/token
-      api_url: https://zitadel.internal.immich.cloud/oidc/v1/userinfo
+      auth_url: https://auth.internal.futo.org/oauth/v2/authorize
+      token_url: https://auth.internal.futo.org/oauth/v2/token
+      api_url: https://auth.internal.futo.org/oidc/v1/userinfo
       role_attribute_path: role
       allow_assign_grafana_admin: "true"
       auto_login: "true"

kubernetes/apps/monitoring/grafana/secrets/oauth.yaml

@@ -11,4 +11,4 @@ spec:
   data:
     - secretKey: GRAFANA_OAUTH_CLIENT_ID
       remoteRef:
-        key: ZITADEL_OAUTH_CLIENT_ID_GRAFANA_MONITORING_PROD
+        key: FUTO_ZITADEL_OAUTH_CLIENT_ID_GRAFANA_MONITORING_PROD

kubernetes/apps/pipelines/data/grafana/app/grafana.yaml

@@ -11,15 +11,17 @@ spec:
       root_url: https://grafana.data.immich.cloud/
     database:
       wal: "true"
+    auth:
+      oauth_allow_insecure_email_lookup: "true"
     auth.generic_oauth:
       enabled: "true"
       client_id: ${quote}${GRAFANA_OAUTH_CLIENT_ID}${quote}
       client_secret: ''
       use_pkce: "true"
       scopes: openid email profile groups offline_access
-      auth_url: https://zitadel.internal.immich.cloud/oauth/v2/authorize
-      token_url: https://zitadel.internal.immich.cloud/oauth/v2/token
-      api_url: https://zitadel.internal.immich.cloud/oidc/v1/userinfo
+      auth_url: https://auth.internal.futo.org/oauth/v2/authorize
+      token_url: https://auth.internal.futo.org/oauth/v2/token
+      api_url: https://auth.internal.futo.org/oidc/v1/userinfo
       role_attribute_path: role
       allow_assign_grafana_admin: "true"
       auto_login: "true"

kubernetes/apps/pipelines/data/grafana/secrets/oauth.yaml

@@ -11,4 +11,4 @@ spec:
   data:
     - secretKey: GRAFANA_OAUTH_CLIENT_ID
       remoteRef:
-        key: ZITADEL_OAUTH_CLIENT_ID_GRAFANA_DATA_PROD
+        key: FUTO_ZITADEL_OAUTH_CLIENT_ID_GRAFANA_DATA_PROD