K3S-HOME/observability
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

REFACTOR(obs): integrate ingress to helm-values

Browse Source 
- alertmanager: move ingress to karma inline, servicemonitor to manifests
- goldilocks: move ingress to helm-values
- grafana: move ingress to helm-values
- uptime-kuma: move ingress to helm-values
This commit is contained in:
Mayne0213
2026-01-06 01:57:03 +09:00
parent 28ba50d1a3
commit 7b9abaf9c8
13 changed files with 64 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
alertmanager/argocd.yaml
View File

@@ -91,6 +91,21 @@ spec:
httpGet:
path: /health
port: http
ingress:
enabled: true
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
hosts:
- karma0213.kro.kr
path: /
pathType: Prefix
tls:
- secretName: karma-tls
hosts:
- karma0213.kro.kr
destination:
server: https://kubernetes.default.svc
namespace: alertmanager

25
alertmanager/ingress.yaml
View File

@@ -1,25 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: karma-ingress
namespace: alertmanager
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- karma0213.kro.kr
secretName: karma-tls
rules:
- host: karma0213.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: karma
port:
number: 8080

3
alertmanager/kustomization.yaml
View File

@@ -1,6 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ingress.yaml
- servicemonitor.yaml
- manifests/servicemonitor.yaml
- vault/alertmanager-secrets.yaml

0
alertmanager/servicemonitor.yaml → alertmanager/manifests/servicemonitor.yaml
View File

24
goldilocks/helm-values.yaml
View File

@@ -18,17 +18,21 @@ dashboard:
type: ClusterIP
port: 80
# Ingress configuration (optional)
ingress:
enabled: false
# Uncomment below to enable ingress
# enabled: true
# ingressClassName: nginx
# hosts:
# - host: goldilocks.example.com
# paths:
# - path: /
# type: Prefix
enabled: true
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
hosts:
- host: goldilocks0213.kro.kr
paths:
- path: /
type: Prefix
tls:
- secretName: goldilocks-dashboard-tls
hosts:
- goldilocks0213.kro.kr
# Controller configuration
controller:

25
goldilocks/ingress.yaml
View File

@@ -1,25 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: goldilocks-dashboard-ingress
namespace: goldilocks
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- goldilocks0213.kro.kr
secretName: goldilocks-dashboard-tls
rules:
- host: goldilocks0213.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: goldilocks-dashboard
port:
number: 80

3
goldilocks/kustomization.yaml
View File

@@ -1,4 +1,3 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ingress.yaml
resources: []

15
grafana/helm-values.yaml
View File

@@ -72,3 +72,18 @@ grafana.ini:
disable_signout_menu: true
news:
news_feed_enabled: false
ingress:
enabled: true
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
hosts:
- grafana0213.kro.kr
- www.grafana0213.kro.kr
tls:
- secretName: grafana-tls
hosts:
- grafana0213.kro.kr
- www.grafana0213.kro.kr

37
grafana/ingress.yaml
View File

@@ -1,37 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: grafana-ingress
namespace: grafana
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
spec:
ingressClassName: traefik
# TLS 설정
tls:
- hosts:
- grafana0213.kro.kr
- www.grafana0213.kro.kr
secretName: grafana-tls
rules:
- host: grafana0213.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: grafana
port:
number: 80
- host: www.grafana0213.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: grafana
port:
number: 80

4
grafana/kustomization.yaml
View File

@@ -2,7 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- vault/grafana-admin-password.yaml
- ingress.yaml
# Dashboard JSON files are stored in dashboards/ for manual import reference
# Auto-provisioning disabled due to ConfigMap size limits

16
uptime-kuma/helm-values.yaml
View File

@@ -30,3 +30,19 @@ serviceMonitor:
enabled: true
namespace: prometheus
interval: 60s
ingress:
enabled: true
className: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
hosts:
- host: kuma0213.kro.kr
paths:
- path: /
pathType: Prefix
tls:
- secretName: uptime-kuma-tls
hosts:
- kuma0213.kro.kr

25
uptime-kuma/ingress.yaml
View File

@@ -1,25 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: uptime-kuma-ingress
namespace: uptime-kuma
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts:
- kuma0213.kro.kr
secretName: uptime-kuma-tls
rules:
- host: kuma0213.kro.kr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: uptime-kuma
port:
number: 3001

4
uptime-kuma/kustomization.yaml
View File

@@ -1,5 +1,3 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ingress.yaml
resources: []