From d72631c9f8b030560d9b737a26b833a32d8fa98e Mon Sep 17 00:00:00 2001
From: Andrey Kartashov <a@ioot.xyz>
Date: Tue, 7 Feb 2023 15:48:32 +0700
Subject: [PATCH] cilium: expose hubble UI

---
 apps/system/cilium/values.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/apps/system/cilium/values.yaml b/apps/system/cilium/values.yaml
index 7a5d7be..72e8efe 100644
--- a/apps/system/cilium/values.yaml
+++ b/apps/system/cilium/values.yaml
@@ -11,3 +11,17 @@ cilium:
       enabled: true
     ui:
       enabled: true
+      ingress:
+        enabled: true
+        annotations:
+          kubernetes.io/ingress.class: nginx
+          kubernetes.io/tls-acme: "true"
+          cert-manager.io/cluster-issuer: letsencrypt
+          nginx.ingress.kubernetes.io/auth-url: "http://oauth2-proxy.oauth2-proxy.svc.cluster.local/auth"
+          nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.ioot.xyz/start?rd=$escaped_request_uri"
+        hosts:
+          - hubble.ioot.xyz
+        tls:
+          - hosts:
+              - hubble.ioot.xyz
+            secretName: hubble-tls