ingress for monitoring

helm/monitoring/oauth2-proxy-alertmanager.yaml

@@ -0,0 +1,19 @@
+config:
+  existingSecret: oauth2-proxy-alertmanager
+
+extraArgs:
+  provider: oidc
+  oidc-issuer-url: "http://keycloak.13.140.150.2.nip.io/auth/realms/airflow-realm"
+  email-domain: "*"
+  insecure-oidc-allow-unverified-email: "true"
+  upstream: "http://monitoring-kube-prometheus-alertmanager.monitoring.svc.cluster.local:9093"
+
+ingress:
+  enabled: true
+  className: nginx
+
+  hosts:
+    - alertmanager.13.140.150.2.nip.io
+
+  path: /
+  pathType: Prefix

helm/monitoring/oauth2-proxy-prometheus.yaml

@@ -0,0 +1,19 @@
+config:
+  existingSecret: oauth2-proxy-prometheus
+
+extraArgs:
+  provider: oidc
+  oidc-issuer-url: "http://keycloak.13.140.150.2.nip.io/auth/realms/airflow-realm"
+  email-domain: "*"
+  insecure-oidc-allow-unverified-email: "true"
+  upstream: "http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
+
+ingress:
+  enabled: true
+  className: nginx
+
+  hosts:
+    - prometheus.13.140.150.2.nip.io
+
+  path: /
+  pathType: Prefix

helm/monitoring/values.yaml

@@ -1,5 +1,28 @@
 grafana:
   enabled: true
+
+  grafana.ini:
+    server:
+      root_url: http://grafana.13.140.150.2.nip.io
+
+    auth:
+      disable_login_form: false
+      oauth_auto_login: false
+
+    auth.generic_oauth:
+      enabled: true
+      name: Keycloak
+      allow_sign_up: true
+      client_id: grafana
+      client_secret: kvULFcvaeWLYzivg1eJFYT9s0Nj674Qr
+      scopes: openid email profile
+      auth_url: http://keycloak.13.140.150.2.nip.io/auth/realms/airflow-realm/protocol/openid-connect/auth
+      token_url: http://keycloak.13.140.150.2.nip.io/auth/realms/airflow-realm/protocol/openid-connect/token
+      api_url: http://keycloak.13.140.150.2.nip.io/auth/realms/airflow-realm/protocol/openid-connect/userinfo
+      email_attribute_path: email
+      login_attribute_path: preferred_username
+      name_attribute_path: full_name
+
   ingress:
     enabled: true
     ingressClassName: nginx
@@ -8,19 +31,10 @@ grafana:
 
 prometheus:
   enabled: true
-  ingress:
-    enabled: true
-    ingressClassName: nginx
-    hosts:
-      - prometheus.13.140.150.2.nip.io
+
   prometheusSpec:
     serviceMonitorSelectorNilUsesHelmValues: false
     podMonitorSelectorNilUsesHelmValues: false
 
 alertmanager:
   enabled: true
-  ingress:
-    enabled: true
-    ingressClassName: nginx
-    hosts:
-      - alertmanager.13.140.150.2.nip.io