Merge pull request #78 from coreos-inc/remove_non_apostille_helm_stuff

fix(helm): add restriction to prom metrics
coreos-inc · Jun 14, 2017 · e6cb30a · e6cb30a
2 parents 676444e + dfbcdaa
commit e6cb30a
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 39 deletions.
diff --git a/helm/apostille-app/extra/apostille-monitoring.yaml b/helm/apostille-app/extra/apostille-monitoring.yaml
diff --git a/helm/apostille-app/extra/namespaces.yaml b/helm/apostille-app/extra/namespaces.yaml
diff --git a/helm/apostille-app/templates/apostille-ingress-prometheus.yaml b/helm/apostille-app/templates/apostille-ingress-prometheus.yaml
@@ -0,0 +1,22 @@
+kind: Ingress
+apiVersion: extensions/v1beta1
+metadata:
+  name: {{.Values.service}}
+  namespace: {{.Values.apostille_namespace}}
+  annotations:
+    kubernetes.io/tls-acme: "true"
+    kubernetes.io/ingress.class: "nginx"
+    ingress.kubernetes.io/whitelist-source-range: "207.251.72.138/32,50.250.250.40/29,195.226.171.114/32"
+spec:
+  tls:
+    - hosts:
+        - {{.Values.service_subdomain}}.quay.io
+      secretName: {{.Values.service}}-apostille-tls
+  rules:
+    - host: {{.Values.service_subdomain}}.quay.io
+      http:
+        paths:
+          - path: /metrics
+            backend:
+              serviceName: {{.Values.service}}
+              servicePort: 4443