initial commit

prod/grafana/README.md

@@ -0,0 +1,3 @@
+1) enable microk8s built-in observability
+2) apply ingressroute-tls (in namespace observability)
+3) log in with password: prom-operator

prod/grafana/ingressroute-tls.yaml

@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: grafana-tls
+  namespace: observability
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`grafana-prod.allarddcs.nl`)
+    kind: Rule
+    services:
+    - name: kube-prom-stack-grafana
+      port: 80
+  tls:
+    certResolver: letsencrypt

prod/grafana/ingressroute-tls2.yaml

@@ -0,0 +1,16 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: grafana-tls-alldcs
+  namespace: observability
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`grafana-prod.alldcs.nl`)
+    kind: Rule
+    services:
+    - name: kube-prom-stack-grafana
+      port: 80
+  tls:
+    certResolver: letsencrypt