Admin stack: Authelia SSO, portal at admin.carr.pub, gated grafana.carr.pub

2026-09-19 21:56:58 -07:00
parent 282fd3db8c
commit 2bc85826f1
5 changed files with 287 additions and 0 deletions
--- a/manifests/admin/ingresses.yaml
+++ b/manifests/admin/ingresses.yaml
@@ -0,0 +1,61 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: auth
+  namespace: admin
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  tls:
+    - hosts: [auth.carr.pub]
+      secretName: auth-carr-pub-tls
+  rules:
+    - host: auth.carr.pub
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service: {name: authelia, port: {number: 9091}}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: admin-portal
+  namespace: admin
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: admin-authelia-auth@kubernetescrd
+spec:
+  tls:
+    - hosts: [admin.carr.pub]
+      secretName: admin-carr-pub-tls
+  rules:
+    - host: admin.carr.pub
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service: {name: portal, port: {number: 80}}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: grafana
+  namespace: monitoring
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: admin-authelia-auth@kubernetescrd
+spec:
+  tls:
+    - hosts: [grafana.carr.pub]
+      secretName: grafana-carr-pub-tls
+  rules:
+    - host: grafana.carr.pub
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service: {name: grafana, port: {number: 3000}}