32 lines
1.1 KiB
YAML
32 lines
1.1 KiB
YAML
hostAliases:
|
|
- ip: "13.140.150.2"
|
|
hostnames:
|
|
- "keycloak.13.140.150.2.nip.io"
|
|
|
|
config:
|
|
existingSecret: oauth2-proxy-prometheus
|
|
cookie_secure: false
|
|
reverse_proxy: true
|
|
set_xauthrequest: true
|
|
cookie_samesite: "lax"
|
|
redirect_url: http://prometheus.13.140.150.2.nip.io/oauth2/callback
|
|
|
|
extraArgs:
|
|
provider: oidc
|
|
skip-oidc-discovery: "true"
|
|
login-url: "http://keycloak.13.140.150.2.nip.io/auth/realms/k8s-apps/protocol/openid-connect/auth"
|
|
redeem-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token"
|
|
oidc-issuer-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps"
|
|
oidc-jwks-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/certs"
|
|
email-domain: "*"
|
|
insecure-oidc-allow-unverified-email: "true"
|
|
upstream: "http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
hosts:
|
|
- prometheus.13.140.150.2.nip.io
|
|
path: /
|
|
pathType: Prefix
|