core-deployments/prometheus/ingress.yaml

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: prometheus-ingress
  namespace: prometheus
  annotations:
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: letsencrypt-prod
    acme.cert-manager.io/http01-edit-in-place: "true"
    ingress.kubernetes.io/ssl-redirect: "false"
    nginx.org/server-snippets: |
      location /.well-known/acme-challenge/ {
          auth_basic off;
      }
    nginx.org/basic-auth-secret: prometheus-basic-auth-secret
    #nginx.org/ssl-services: "prometheus-server"
spec:
  rules:
  - host: "prometheus.apps.yolokube.de"
    http:
      paths:
      - pathType: Prefix
        path: "/"
        backend:
          service:
            name: prometheus-server
            port:
              number: 80
  tls:
  - hosts:
    - prometheus.apps.yolokube.de
    secretName: prometheus-cert
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: alertmanager-ingress
  namespace: prometheus
  annotations:
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: letsencrypt-prod
    acme.cert-manager.io/http01-edit-in-place: "true"
    ingress.kubernetes.io/ssl-redirect: "false"
    nginx.org/server-snippets: |
      location /.well-known/acme-challenge/ {
          auth_basic off;
      }
    nginx.org/basic-auth-secret: prometheus-basic-auth-secret
    #nginx.org/ssl-services: "prometheus-server"
spec:
  rules:
  - host: "alertmanager.apps.yolokube.de"
    http:
      paths:
      - pathType: Prefix
        path: "/"
        backend:
          service:
            name: prometheus-alertmanager
            port:
              number: 9093
  tls:
  - hosts:
    - alertmanager.apps.yolokube.de
    secretName: alertmanager-cert
---
kind: Secret
metadata:
  name: prometheus-basic-auth-secret
  namespace: prometheus
apiVersion: v1
type: nginx.org/htpasswd
stringData:
  htpasswd: |
    aaron:$2y$05$B2.Q.9/e4VEXsnoe.ypjYOkiykmrF2hpApE7CYc2DPIr0pFIdDO1O
    tom:$2y$05$BsM7fvmf3Gpuznak5OSgre0x81K4.vxUQO/aKW5cY4gmQOzvssPLO