Ultradesu
52780edbb5
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 5s
49 lines
1.0 KiB
YAML
49 lines
1.0 KiB
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: loki-machine-auth
|
|
spec:
|
|
forwardAuth:
|
|
address: http://auth-proxy.keycloak.svc:80/auth
|
|
trustForwardHeader: false
|
|
---
|
|
# Do not pass the Keycloak client secret through to Loki after ForwardAuth.
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: loki-strip-authorization
|
|
spec:
|
|
headers:
|
|
customRequestHeaders:
|
|
Authorization: ""
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: loki-push
|
|
spec:
|
|
entryPoints: [websecure]
|
|
routes:
|
|
- match: Host(`loki.hexor.cy`) && Path(`/loki/api/v1/push`) && Method(`POST`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: loki-machine-auth
|
|
- name: loki-strip-authorization
|
|
services:
|
|
- name: loki-gateway
|
|
port: 80
|
|
tls:
|
|
secretName: loki-push-tls
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: loki-push-tls
|
|
spec:
|
|
secretName: loki-push-tls
|
|
issuerRef:
|
|
name: letsencrypt
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- loki.hexor.cy
|