grafana ingress

Signed-off-by: junior <junior@users.noreply.github.com>

Author: junior

modules/cluster-tools/cert-manager.tf

@@ -29,5 +29,64 @@ resource "helm_release" "cert_manager" {
     value = "30"
   }
 
+  count = var.cert_manager_enabled ? 1 : 0
+}
+
+resource "kubernetes_manifest" "clusterissuer_letsencrypt_prod" {
+  manifest = {
+    "apiVersion" = "cert-manager.io/v1"
+    "kind"       = "ClusterIssuer"
+    "metadata" = {
+      "name" = "letsencrypt-prod"
+    }
+    "spec" = {
+      "acme" = {
+        "email" = "${var.ingress_email_issuer}"
+        "privateKeySecretRef" = {
+          "name" = "letsencrypt-prod"
+        }
+        "server" = "https://acme-v02.api.letsencrypt.org/directory"
+        "solvers" = [
+          {
+            "http01" = {
+              "ingress" = {
+                "class" = "nginx"
+              }
+            }
+          },
+        ]
+      }
+    }
+  }
+
+  count = var.cert_manager_enabled ? 1 : 0
+}
+resource "kubernetes_manifest" "clusterissuer_letsencrypt_staging" {
+  manifest = {
+    "apiVersion" = "cert-manager.io/v1"
+    "kind"       = "ClusterIssuer"
+    "metadata" = {
+      "name" = "letsencrypt-staging"
+    }
+    "spec" = {
+      "acme" = {
+        "email" = "${var.ingress_email_issuer}"
+        "privateKeySecretRef" = {
+          "name" = "letsencrypt-staging"
+        }
+        "server" = "https://acme-staging-v02.api.letsencrypt.org/directory"
+        "solvers" = [
+          {
+            "http01" = {
+              "ingress" = {
+                "class" = "nginx"
+              }
+            }
+          },
+        ]
+      }
+    }
+  }
+
   count = var.cert_manager_enabled ? 1 : 0
 }

modules/cluster-tools/cluster-tools.tf

@@ -13,11 +13,11 @@ locals {
   # Helm repos
   helm_repository = {
     ingress_nginx          = "https://kubernetes.github.io/ingress-nginx"
-    ingress_nginx_version  = "4.2.3"
+    ingress_nginx_version  = "4.2.5"
     jetstack               = "https://charts.jetstack.io" # cert-manager
     jetstack_version       = "1.9.1"                      # cert-manager
     grafana                = "https://grafana.github.io/helm-charts"
-    grafana_version        = "6.34.0"
+    grafana_version        = "6.38.0"
     prometheus             = "https://prometheus-community.github.io/helm-charts"
     prometheus_version     = "15.12.0"
     metrics_server         = "https://kubernetes-sigs.github.io/metrics-server"

modules/cluster-tools/grafana.tf

@@ -149,6 +149,58 @@ EOF
   count = var.grafana_enabled ? 1 : 0
 }
 
+## Grafana Ingress
+resource "kubernetes_ingress_v1" "grafana" {
+  wait_for_load_balancer = true
+  metadata {
+    name        = "grafana"
+    namespace   = kubernetes_namespace.cluster_tools.id
+    annotations = local.ingress_nginx_annotations
+  }
+  spec {
+    ingress_class_name = "nginx"
+    rule {
+      http {
+        path {
+          path      = "/grafana(/|$)(.*)"
+          path_type = "Prefix"
+          backend {
+            service {
+              name = "grafana"
+              port {
+                number = 80
+              }
+            }
+          }
+        }
+      }
+    }
+
+    dynamic "rule" {
+      for_each = local.ingress_hosts
+      content {
+        host = rule.value
+        http {
+          path {
+            path      = "/grafana(/|$)(.*)"
+            path_type = "Prefix"
+            backend {
+              service {
+                name = "grafana"
+                port {
+                  number = 80
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+  depends_on = [helm_release.ingress_nginx, helm_release.grafana]
+
+  count = (var.grafana_enabled && var.ingress_nginx_enabled) ? 1 : 0
+}
 ## Kubernetes Secret: Grafana Admin Password
 data "kubernetes_secret" "grafana" {
   metadata {