fix(monitoring): Add a dedicated traefik-forward-auth for monitoring

infra/monitoring/auth-secret.yaml

@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: traefik-forward-auth-secrets
+  namespace: monitoring
+spec:
+  encryptedData:
+    google-client-id: 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
+    google-client-secret: AgCSv9VvIAo28vIYLVoMqzsdS6bo/m9WfVc1GDuuTLscjs05vug+OaD3l9gYSWdpDIr579w6gVZ3DO6grvLjFumdmW0v0lTxIfiEt3LmJWsR+iKx0O6YO5aXxe2rf9v7XOBAYIYqfxhJBueOxaUXeLQ2v/WEVwmBkR12peY4AahGr/hCJF6Vsvak32LvX8VJSL7CKbknKwAGq1I03juHo/Gs5g+syZIgdm97x46blixW9AGRYerVc8x+VCGtMIe4mDEzd8BuUvwQQ83cVnYX+o5R3M9QyZuWuSsvIAB7h5y4Gc2W/w/TUKiSD0EsIzS6kPVP4b7XMGhTBLtlt3fEBNpzGHHJdHqmFH6pFr43ctTaYYum5Ni80Ve60vdEVfsKQjPOqQhoitiOYMXl57aJ4EX5kZLgn4oWn4rBFi76oKijlchlYWi1moaVPRsTl23Shs2mOWJD6dci9PkuOldpejs558KN0obQxRgv/6L2cgRG5HYihZN9eF65sg/MFTIbvhZeuVnyAkRodUyGeh9R5XnvgVpp+0lqGnTTtuHaKJui6A+nQVKysx67ONiogaGiS/VpZV3uxMbT/OEL8+Yn5lgUWRRkDGV9WGNP7x0H5sroAxM1d+zsxiqdQB/jjXdIQ6J428EIrKIvLPBAiAHHXWU3nLhaEAfgFIKzu1M2bxpYU0Nt7BhyoB2FEWmX+HH76WtG2wxrI5rozjz/q7n3qvej8zxWscO08BLLqTpper0cv0yy1A==
+    secret: AgA0eeTRpfmti4KV27iYpmTnDrrWE6a+va0WZEhSzJDWNDYvQNSj6FzNrcLquR2lTSPdWAqEWmWIdDOkj9N1Vgh4FYSvN+EFb07PJ5eO1QNd4P6MRWqxWi6qmthylKCl22LW+55D8lKevxxKgk5foEfLH63m7o7GfWGYH2ZcSkRWVkMNBR2QO2fR2dTP+R1AXKtDdsQBeXWNwv82Pgqh3S6j4CxCqtXYDFaPU330tojeVgaEBvHcY8vKIvK4S3c4T1C6f+3c8PnzHHbaPFZgBuBuaIjN9ZBOC7cIH2Cwz0rX+17ZOGLx8yJNauYJA59b1kNTP/+jC5wO7WNIHhOD0ZIpfWq2NtjPsGXjs7X4M8xdc8ZImYzS8JuFXOwJgXOBVliN3HoGZPUnfY+v6qtoSYJo7tc3dE92gBvM4oie02hzNTrCJ8CmPlMhAFGwhoCizxcnIAHoOX0DCAyjEghDAdsm+U7GVsqOe7jOBmzMHzUdokB6pYmxitGOQf4Y3QsMKfTF3onM6uq45HUgd9Yh7UwUWj2zGDtT6UXs766SxgYPfWL8s72w6KIOF4p9hDuJ7NQlfkUtmwSGAySbC+CEMdD9dU0eDJkfDYWl7XgrstQ14wqHiCWxfRxJSXMEPkIvLYDot/rtnBUOY8qBZNBjI1so2++tfGokpN4twrQV76BPIzXfvZ8NttIvO5D+U10djd0wVMqLTbi9qB7d083IDrUQtVl2hrZWm0QegsYPrCD2oolfag==
+  template:
+    metadata:
+      name: traefik-forward-auth-secrets
+      namespace: monitoring
+    type: Opaque

infra/monitoring/auth-values.yaml

@@ -0,0 +1,7 @@
+name: auth
+namespace: monitoring
+authOnly: true
+auth:
+  cookieDomain: stonegarden.dev
+  whitelist:
+    - [email protected]

infra/monitoring/ingress-route.yaml

@@ -16,7 +16,6 @@ spec:
           port: http-web # 9090
       middlewares:
         - name: traefik-forward-auth
-          namespace: kube-system
     - match: Host(`grafana.stonegarden.dev`)
       kind: Rule
       services:
@@ -24,12 +23,10 @@ spec:
           port: http-web # 80
       middlewares:
         - name: traefik-forward-auth
-          namespace: kube-system
     - match: Host(`alertmanager.stonegarden.dev`)
       kind: Rule
       services:
         - name: kube-prometheus-stack-alertmanager
           port: http-web # 9093
       middlewares:
-        - name: traefik-forward-auth
-          namespace: kube-system
+        - name: traefik-forward-auth

infra/monitoring/kustomization.yaml

@@ -3,5 +3,14 @@ kind: Kustomization
 
 resources:
   - namespace.yaml
+  - auth-secret.yaml
   - kube-prometheus-stack.yaml
-  - ingress-route.yaml
+  - ingress-route.yaml
+
+helmGlobals:
+  chartHome: ../../charts
+
+helmCharts:
+  - name: application
+    releaseName: auth
+    valuesFile: auth-values.yaml