feat: added ingress entries for monitoring

- prafana
- prometheus
- alertmanager

roles/kubernetes/apps/defaults/main.yml

@@ -9,6 +9,40 @@ k8s_argocd_helm__release_namespace: "argo-cd"
 # https://github.com/grafana/helm-charts
 # https://github.com/prometheus-community/helm-charts
 k8s_prometheus_helm__release_values:
+  prometheus:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ip_whitelist | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-prometheus.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-prometheus-cert"
+          hosts:
+            - "{{ stage }}-kube-prometheus.{{ domain }}"
+    deploymentStrategy:
+      type: Recreate
+  alertmanager:
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ip_whitelist | join(',') }}"
+      hosts:
+        - "{{ stage }}-kube-alertmanager.{{ domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-alertmanager-cert"
+          hosts:
+            - "{{ stage }}-kube-alertmanager.{{ domain }}"
+    deploymentStrategy:
+      type: Recreate
   grafana:
     adminUser: "{{ grafana_admin_username }}"
     adminPassword: "{{ grafana_admin_password }}"