feat(monitoring): add certificate and IAP policy

WISVCH · Dec 8, 2023 · 226623c · 226623c
1 parent 30c8fc3
commit 226623c
Show file tree

Hide file tree

Showing 5 changed files with 31 additions and 1 deletion.
diff --git a/requirements/monitoring/grafana/certificate.yaml b/requirements/monitoring/grafana/certificate.yaml
@@ -0,0 +1,8 @@
+apiVersion: networking.gke.io/v1
+kind: ManagedCertificate
+metadata:
+  name: monitoring
+  namespace: default
+spec:
+  domains:
+    - montoring.wisv.ch
diff --git a/requirements/monitoring/grafana/iap.yaml b/requirements/monitoring/grafana/iap.yaml
@@ -0,0 +1,16 @@
+apiVersion: networking.gke.io/v1
+kind: GCPBackendPolicy
+metadata:
+  name: grafana-backend-policy
+  namespace: default
+spec:
+  default:
+    iap:
+      enabled: true
+      oauth2ClientSecret:
+        name: iap-secret
+      clientID: 966138216790-us6sue108a879v3vk2om9inn3ftpobkg.apps.googleusercontent.com
+  targetRef:
+    group: ""
+    kind: Service
+    name: grafana
diff --git a/requirements/monitoring/grafana/kustomization.yaml b/requirements/monitoring/grafana/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - release.yaml
+  - certificate.yaml
+  - iap.yaml
diff --git a/requirements/monitoring/grafana.yaml → requirements/monitoring/grafana/release.yaml b/requirements/monitoring/grafana.yaml → requirements/monitoring/grafana/release.yaml
diff --git a/requirements/monitoring/kustomization.yaml b/requirements/monitoring/kustomization.yaml
@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - grafana.yaml
+  - grafana
   - victoriametrics.yaml