prometheus-ingress.yaml (5939B)
1 apiVersion: gateway.networking.k8s.io/v1 2 kind: HTTPRoute 3 metadata: 4 name: prometheus 5 namespace: monitoring 6 spec: 7 parentRefs: 8 - name: envoy-gateway 9 namespace: envoy-gateway 10 hostnames: 11 - prometheus.midnightthoughts.space 12 rules: 13 - backendRefs: 14 - name: prometheus-stack-kube-prom-prometheus 15 port: 9090 16 sops: 17 kms: [] 18 gcp_kms: [] 19 azure_kv: [] 20 hc_vault: [] 21 age: 22 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 23 enc: | 24 -----BEGIN AGE ENCRYPTED FILE----- 25 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkNFp6eGhxejdMSzZHWXY0 26 VkhCdHlXdHRWUVdTQnJWTm5sWVJRWmlWYlNrClRhMTcyQXRVN3BLWWVIYjRvTlp4 27 UjFFOWtCYnc2UHAxNm1CcUVKaVVHRmcKLS0tIDBydStOYlFVemtHVDlsTFA2ZGdB 28 RlZRQVRRb3pJUUxzUFRjUmptRXJBOGcK4+tQNnQh+eHpCUoeU0ruWBmLRiUvesSf 29 wE1x1aWg+dcRWuX7zjw8UWgrIpwRh++jha1R7oZ1lYRLi+6WhcWjHg== 30 -----END AGE ENCRYPTED FILE----- 31 lastmodified: "2026-03-13T19:24:00Z" 32 mac: ENC[AES256_GCM,data:ke9726909blNlfMQg53SeMZyWSzSSRzR8u/XHKu4u4ad1zIz3ePp9lCEGUdLrc4Dr02FxQSpQOezmC9DoXDM0gUhG4q9jARWhDOCpMEhp7W8WeYgqw6pQXNYqx9g7DE6Gd4omqYli897UDktSbmNTCSx23h8tXMUxxGVO/A8Ncs=,iv:j0AjJWAmIDQ1tWe8zEkjT0kzNwWiRobTr7JHthaHDlk=,tag:rLHld/bYAGdkNjs8s9izfQ==,type:str] 33 pgp: [] 34 encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ 35 version: 3.9.1 36 --- 37 apiVersion: gateway.envoyproxy.io/v1alpha1 38 kind: SecurityPolicy 39 metadata: 40 name: oidc-prometheus 41 namespace: monitoring 42 spec: 43 targetRefs: 44 - group: gateway.networking.k8s.io 45 kind: HTTPRoute 46 name: prometheus 47 oidc: 48 provider: 49 issuer: https://auth.midnightthoughts.space/application/o/grafana/ 50 authorizationEndpoint: https://auth.midnightthoughts.space/application/o/authorize/ 51 tokenEndpoint: https://auth.midnightthoughts.space/application/o/token/ 52 clientID: Hi9j2holcUd89OwdmJgoaGppow6RrECQJiTq4Isk 53 clientSecret: 54 name: ENC[AES256_GCM,data:HHYmo/uHMaUR4ijVzlLKnT5EH3qOHfSW,iv:LGCJhFYtEVmYeFnAC1i8hPB4DszKdHLupWcYo68Mj9M=,tag:bU3XTDReabonGBBB2KvpOg==,type:str] 55 refreshToken: true 56 cookieDomain: midnightthoughts.space 57 sops: 58 kms: [] 59 gcp_kms: [] 60 azure_kv: [] 61 hc_vault: [] 62 age: 63 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 64 enc: | 65 -----BEGIN AGE ENCRYPTED FILE----- 66 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkNFp6eGhxejdMSzZHWXY0 67 VkhCdHlXdHRWUVdTQnJWTm5sWVJRWmlWYlNrClRhMTcyQXRVN3BLWWVIYjRvTlp4 68 UjFFOWtCYnc2UHAxNm1CcUVKaVVHRmcKLS0tIDBydStOYlFVemtHVDlsTFA2ZGdB 69 RlZRQVRRb3pJUUxzUFRjUmptRXJBOGcK4+tQNnQh+eHpCUoeU0ruWBmLRiUvesSf 70 wE1x1aWg+dcRWuX7zjw8UWgrIpwRh++jha1R7oZ1lYRLi+6WhcWjHg== 71 -----END AGE ENCRYPTED FILE----- 72 lastmodified: "2026-03-13T19:24:00Z" 73 mac: ENC[AES256_GCM,data:ke9726909blNlfMQg53SeMZyWSzSSRzR8u/XHKu4u4ad1zIz3ePp9lCEGUdLrc4Dr02FxQSpQOezmC9DoXDM0gUhG4q9jARWhDOCpMEhp7W8WeYgqw6pQXNYqx9g7DE6Gd4omqYli897UDktSbmNTCSx23h8tXMUxxGVO/A8Ncs=,iv:j0AjJWAmIDQ1tWe8zEkjT0kzNwWiRobTr7JHthaHDlk=,tag:rLHld/bYAGdkNjs8s9izfQ==,type:str] 74 pgp: [] 75 encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ 76 version: 3.9.1