search

niclic / helm-charts

Some useful Helm Charts.
Apache License 2.0
3 stars 3 forks source link

Add basic auth option to statsd exporter ingress #2

Open yaron-idan opened 4 years ago

yaron-idan commented 4 years ago

I'm deploying statsd exporter in my k8s cluster, in order to send metrics from lambda functions to it's ingress. In order to avoid exposing the ingress endpoint to the world unauthenticated. I've manually created a basic-auth secret and added it to the ingress object. WDYT about adding the secret to the template? I can open a PR if you think this has value.

niclic commented 4 years ago

I think this is a valid use case. Obviously ingress supports auth for these scenarios. In my own experience, I have only used the exporter to allow other services within the same k8s cluster to send metrics to graphite. However, another valid use case is to run a monitoring/metrics stack in k8s, with external services submitting metrics to it. In your scenario, that is AWS Lambda.

Lambda functions can access resources in a VPC network, such as an Ingress Controller backed by a private ELB in the VPC. Depending on your requirements, basic auth may not be required in this case.