Make prometheus ingress configurable

ansible/group_vars/all/oas.yml

@@ -31,7 +31,8 @@ wordpress_mariadb_root_password: "{{ lookup('password', '{{ cluster_dir }}/secre
 # Grafana credentials
 grafana_admin_password: "{{ lookup('password', '{{ cluster_dir }}/secrets/grafana_admin_password chars=ascii_letters') }}"
 
-# Prometheus credentials
+# Credetnials used to protect the prometheus server. Only needed when prometheus ingress is enabled
+# username is admin
 prometheus_basic_auth: "{{ lookup('password', '{{ cluster_dir }}/secrets/prometheus_basic_auth chars=ascii_letters') }}"
 
 # Single sign-on passwords

ansible/group_vars/all/settings.yml.example

@@ -13,6 +13,8 @@ release_name: "test"
 # Important: Don't quote this variable !
 acme_staging: false
 
+prometheus_enable_ingress: false
+
 # A whitelist of applications that will be enabled.
 enabled_applications:
   # System components, necessary for the system to function.

ansible/roles/apps/tasks/prometheus.yml

@@ -14,6 +14,7 @@
         name: "prometheus-basic-auth"
       data:
         auth: "{{ ('admin:' + (prometheus_basic_auth | password_hash('apr_md5_crypt')) + '\n')  | b64encode }}"
+  when: prometheus_enable_ingress is defined and prometheus_enable_ingress is true
 - name: Create Kubernetes secret with prometheus settings
   tags:
     - config

ansible/roles/apps/templates/settings/prometheus.yaml

@@ -8,6 +8,7 @@ server:
   persistentVolume:
     existingClaim: "prometheus-server"
   retention: "10d"
+  {% if prometheus_enable_ingress is defined and prometheus_enable_ingress %}
   ingress:
     enabled: true
     annotations:
@@ -21,6 +22,7 @@ server:
       - secretName: prometheus-tls
         hosts:
           - "prometheus.{{ domain }}"
+  {% endif %}
 
 serverFiles:
   alerting_rules.yml: