grafana的配置-加域及k8s项目限定权限

vim /etc/grafana/grafana.ini
[server]
root_url = %(protocol)s://{ip}:%(http_port)s/proxy/grafana/kubernetes-dev/
serve_from_sub_path = true
[auth.ldap]
enabled = true
config_file = /etc/grafana/ldap.toml
allow_sign_up = true
[smtp]
enabled = true
host = {smtp_ip}:{smtp_port}
user = xxx@xxx
password = xxx
skip_verify = true
from_address = xx@xxx
from_name = Grafana
[emails]
welcome_email_on_sign_up = true

vi /etc/grafana/ldap.toml
ldap.toml: |
    [log]
    mode = 'console'
    filters = 'ldap:debug'

    [[servers]]

    host = "{ldap_ip/域名}"
    port = 389
    use_ssl = false
    start_tls = false
    ssl_skip_verify = false
    bind_dn = "xx@xxx"
    bind_password = "xxx"
    search_filter = "(sAMAccountName=%s)"
    search_base_dns = ["dc=xx,dc=org"]

    [servers.attributes]
    name = "givenName"
    surname = "sn"
    username = "sAMAccountName"
    member_of = "dn"
    email = "email"
    [[servers.group_mappings]]
    group_dn = "*"
    org_role = "Viewer"
    org_id = 2