feat(loki): Add ingress for loki.thedevops.dev with TLS
This commit is contained in:
36
apps/loki/ingress.yaml
Normal file
36
apps/loki/ingress.yaml
Normal file
@@ -0,0 +1,36 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: loki
|
||||
namespace: loki
|
||||
annotations:
|
||||
# Traefik annotations
|
||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||
|
||||
# Let's Encrypt TLS certificate
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
|
||||
# Basic authentication for security
|
||||
# Generate password: htpasswd -nb admin your-password | base64
|
||||
traefik.ingress.kubernetes.io/router.middlewares: loki-basic-auth@kubernetescrd
|
||||
|
||||
# Additional headers for Loki
|
||||
traefik.ingress.kubernetes.io/custom-request-headers: "X-Scope-OrgID:tenant1"
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- loki.thedevops.dev
|
||||
secretName: loki-tls
|
||||
rules:
|
||||
- host: loki.thedevops.dev
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: loki
|
||||
port:
|
||||
number: 3100
|
||||
Reference in New Issue
Block a user