From ca948de07cd9caea069e0d4aa79d7e1327f4d4d5 Mon Sep 17 00:00:00 2001
From: Seth Call <seth@jamkazam.com>
Date: Sat, 2 Aug 2025 11:33:06 -0500
Subject: [PATCH] Update rewrite rules to allow public access to grafana

---
 k8s/monitoring/values-production.yaml | 30 +++++++++++++--------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/k8s/monitoring/values-production.yaml b/k8s/monitoring/values-production.yaml
index f7ded46..5ff6195 100644
--- a/k8s/monitoring/values-production.yaml
+++ b/k8s/monitoring/values-production.yaml
@@ -19,12 +19,12 @@ kube-prometheus-stack:
       pathType: Prefix
       annotations:
         kubernetes.io/ingress.class: nginx
-        nginx.ingress.kubernetes.io/rewrite-target: /$2
+        #nginx.ingress.kubernetes.io/rewrite-target: /$2
         cert-manager.io/cluster-issuer: letsencrypt-nginx-production
         nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-        # nginx.ingress.kubernetes.io/auth-type: basic
-        # nginx.ingress.kubernetes.io/auth-secret: basic-auth
-        # nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
+        nginx.ingress.kubernetes.io/auth-type: basic
+        nginx.ingress.kubernetes.io/auth-secret: monitoring-basic-auth 
+        nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
       hosts:
       - monitoring.video.jamkazam.com
       paths:
@@ -36,7 +36,7 @@ kube-prometheus-stack:
     prometheusSpec:
       retention: 60d
       retentionSize: 20GB
-      routePrefix: /
+      routePrefix: /prometheus
       externalUrl: https://monitoring.video.jamkazam.com/prometheus
       storageSpec:
         volumeClaimTemplate:
@@ -52,12 +52,12 @@ kube-prometheus-stack:
       pathType: Prefix
       annotations:
         kubernetes.io/ingress.class: nginx
-        nginx.ingress.kubernetes.io/rewrite-target: /$2
+        #nginx.ingress.kubernetes.io/rewrite-target: /$2
         cert-manager.io/cluster-issuer: letsencrypt-nginx-production
         nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-        # nginx.ingress.kubernetes.io/auth-type: basic
-        # nginx.ingress.kubernetes.io/auth-secret: basic-auth
-        # nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
+        nginx.ingress.kubernetes.io/auth-type: basic
+        nginx.ingress.kubernetes.io/auth-secret: monitoring-basic-auth 
+        nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
       hosts:
       - monitoring.video.jamkazam.com
       paths:
@@ -67,8 +67,8 @@ kube-prometheus-stack:
         hosts:
         - monitoring.video.jamkazam.com
     alertmanagerSpec:
-      #routePrefix: /
-      #externalUrl: https://monitoring.video.jamkazam.com/alertmanager
+      routePrefix: /alertmanager
+      externalUrl: https://monitoring.video.jamkazam.com/alertmanager
       storage:
         volumeClaimTemplate:
           spec:
@@ -87,12 +87,12 @@ kube-prometheus-stack:
       pathType: Prefix
       annotations:
         kubernetes.io/ingress.class: nginx
-        nginx.ingress.kubernetes.io/rewrite-target: /$2
+        #nginx.ingress.kubernetes.io/rewrite-target: /$2
         cert-manager.io/cluster-issuer: letsencrypt-nginx-production
         nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-        # nginx.ingress.kubernetes.io/auth-type: basic
-        # nginx.ingress.kubernetes.io/auth-secret: basic-auth
-        # nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
+        #nginx.ingress.kubernetes.io/auth-type: basic
+        #nginx.ingress.kubernetes.io/auth-secret: monitoring-basic-auth 
+        #nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
       hosts:
       - monitoring.video.jamkazam.com
       path: /grafana