feat(loki): Add ingress for loki.thedevops.dev with TLS
This commit is contained in:
36
apps/loki/ingress.yaml
Normal file
36
apps/loki/ingress.yaml
Normal file
@@ -0,0 +1,36 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: loki
|
||||||
|
namespace: loki
|
||||||
|
annotations:
|
||||||
|
# Traefik annotations
|
||||||
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||||
|
|
||||||
|
# Let's Encrypt TLS certificate
|
||||||
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||||
|
|
||||||
|
# Basic authentication for security
|
||||||
|
# Generate password: htpasswd -nb admin your-password | base64
|
||||||
|
traefik.ingress.kubernetes.io/router.middlewares: loki-basic-auth@kubernetescrd
|
||||||
|
|
||||||
|
# Additional headers for Loki
|
||||||
|
traefik.ingress.kubernetes.io/custom-request-headers: "X-Scope-OrgID:tenant1"
|
||||||
|
spec:
|
||||||
|
ingressClassName: traefik
|
||||||
|
tls:
|
||||||
|
- hosts:
|
||||||
|
- loki.thedevops.dev
|
||||||
|
secretName: loki-tls
|
||||||
|
rules:
|
||||||
|
- host: loki.thedevops.dev
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: loki
|
||||||
|
port:
|
||||||
|
number: 3100
|
||||||
Reference in New Issue
Block a user