From f9b7844c3d910d530c919e920ab8a0974b73206a Mon Sep 17 00:00:00 2001
From: Sven Ketelsen <sven.ketelsen@arxes-tolina.de>
Date: Wed, 10 Nov 2021 10:15:13 +0100
Subject: [PATCH] feat: added ingress entries for monitoring

- prafana
- prometheus
- alertmanager
---
 roles/kubernetes/apps/defaults/main.yml | 34 +++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/roles/kubernetes/apps/defaults/main.yml b/roles/kubernetes/apps/defaults/main.yml
index a657880..de5dafb 100644
--- a/roles/kubernetes/apps/defaults/main.yml
+++ b/roles/kubernetes/apps/defaults/main.yml
@@ -9,6 +9,40 @@ k8s_argocd_helm__release_namespace: "argo-cd"
 # https://github.com/grafana/helm-charts
 # https://github.com/prometheus-community/helm-charts
 k8s_prometheus_helm__release_values:
+  prometheus:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ip_whitelist | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-prometheus.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-prometheus-cert"
+          hosts:
+            - "{{ stage }}-kube-prometheus.{{ domain }}"
+    deploymentStrategy:
+      type: Recreate
+  alertmanager:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ip_whitelist | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-alertmanager.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-alertmanager-cert"
+          hosts:
+            - "{{ stage }}-kube-alertmanager.{{ domain }}"
+    deploymentStrategy:
+      type: Recreate
   grafana:
     adminUser: "{{ grafana_admin_username }}"
     adminPassword: "{{ grafana_admin_password }}"