# PMM3 Helm Chart - Grafana LDAP configuration file

**URL:** <https://forums.percona.com/t/pmm3-helm-chart-grafana-ldap-configuration-file/37665>\
**Category:** PMM 3.x\
**Tags:** pmm\
**Created:** [April 18, 2025, 3:51pm UTC](https://forums.percona.com/t/pmm3-helm-chart-grafana-ldap-configuration-file/37665 "2025-04-18T15:51:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![yngmntr](https://avatars.discourse-cdn.com/v4/letter/y/85f322/32.png) [@yngmntr](https://forums.percona.com/u/yngmntr)\
**Post date:** [April 18, 2025, 3:51pm UTC](https://forums.percona.com/t/pmm3-helm-chart-grafana-ldap-configuration-file/37665/1 "2025-04-18T15:51:24Z")

</div>

Hi there!

I was trying to configure ldap auth on my pmm3 server installed on k8s with the [official helm chart](https://github.com/percona/percona-helm-charts/tree/main/charts/pmm) but, as per the [offical grafana docs](https://grafana.com/docs/grafana/next/setup-grafana/configure-security/configure-authentication/ldap/), you need to configure the server parameters in a toml file specified by the ‘GF\_AUTH\_LDAP\_CONFIG\_FILE’ env var.

Here’s a snippet of my values.yaml:

```yaml
image:
  repository: <proxy-repo-url>/percona/pmm-server
ingress:
  enabled: true
  ingressClassName: nginx
  hosts:
    - host: xxx
      paths:
        - '/'
storage:
  storageClassName: longhorn
  size: 10Gi
pmmEnv:
  PMM_ENABLE_UPDATES: 'false'
  # Mail alerts
  GF_SMTP_ENABLED: 'true'
  GF_SMTP_SKIP_VERIFY: 'true'
  GF_SMTP_HOST: xxx
  GF_SMTP_FROM_ADDRESS: xxx
  GF_SMTP_FROM_NAME: 'Percona Monitoring and Management'
  # Ldap Auth
  GF_AUTH_LDAP_ENABLED: 'true'
  GF_AUTH_LDAP_SKIP_ORG_ROLE_SYNC: 'true'
  GF_AUTH_LDAP_CONFIG_FILE: /etc/grafana/ldap.toml
  GF_LOG_FILTERS: ldap:debug

```

I can see in the chart’s template values.yaml file that there are the `extraVolumeMounts` and `extraVolumes` parameters, but there is no example configuration provided, is there any ‘standard’ way to configure that file in the values.yaml? Has anyone done this before?

Thanks.

---

<div class="post-metadata">

**Author:** ![yngmntr](https://avatars.discourse-cdn.com/v4/letter/y/85f322/32.png) [@yngmntr](https://forums.percona.com/u/yngmntr)\
**Post date:** [April 19, 2025, 5:04pm UTC](https://forums.percona.com/t/pmm3-helm-chart-grafana-ldap-configuration-file/37665/2 "2025-04-19T17:04:37Z")

</div>

Hi, while trying stuff out i came up with the following configuration that does what i need, you need to apply the following configmap:

```yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: pmm-ldap-config
  namespace: <pmm-namespace>
data:
  ldap.toml: |
    # LDAP Configuration file for Grafana

```

and add the following parameters to the values.yaml:

```yaml
extraVolumes:
  - name: ldap-config
    configMap:
      name: pmm-ldap-config
extraVolumeMounts:
  - name: ldap-config
    mountPath: /etc/grafana/ldap.toml
    subPath: ldap.toml

```

Now i just need to get it working with Active directory 😅.  
Happy thinkering!