From 59199606fba37f8a734a37b87bbedfc327b9899e Mon Sep 17 00:00:00 2001
From: viktorbarzin <vbarzin@gmail.com>
Date: Sat, 8 May 2021 01:19:24 +0100
Subject: [PATCH] move grafana behind client tls until auth is setup [ci skip]

---
 modules/kubernetes/monitoring/grafana_chart_values.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/kubernetes/monitoring/grafana_chart_values.yaml b/modules/kubernetes/monitoring/grafana_chart_values.yaml
index 4ee908dd..de631e18 100644
--- a/modules/kubernetes/monitoring/grafana_chart_values.yaml
+++ b/modules/kubernetes/monitoring/grafana_chart_values.yaml
@@ -9,6 +9,8 @@ ingress:
   annotations:
     kubernetes.io/ingress.class: nginx
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+    nginx.ingress.kubernetes.io/auth-tls-secret: "default/ca-secret"
   tls:
     - secretName: "tls-secret"
       hosts: