try oauth2 proxy for prom

2025-03-31 10:21:56 +02:00
parent 6ad3654593
commit 027c9edb6d
2 changed files with 68 additions and 5 deletions
--- a/deploy/prometheus/manifests/prometheus-k8s-ingress.yaml
+++ b/deploy/prometheus/manifests/prometheus-k8s-ingress.yaml
@@ -3,6 +3,8 @@ kind: Ingress
 metadata:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
  name: prometheus-k8s
  namespace: monitoring
 spec:
@@ -13,9 +15,9 @@ spec:
      paths:
      - backend:
          service:
-            name: prometheus-k8s
+            name: oauth2-proxy-prometheus-service
            port:
-              name: web
+              number: 4180
        path: /
        pathType: Prefix
  tls: