Expose and secure Keptn Bridge via nginx ingress

expose-brdige.md

Create basic auth credentials

$ htpasswd -c auth UserName
New password: <Password>
Re-type new password:
Adding password for user UserName

Create secret

$ kubectl create secret generic bridge-basic-auth --from-file=auth
secret "bridge-basic-auth" created

Create Ingress

Create a new ingress file (bridge-ingress.yaml):

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: bridge-ingress
  namespace: keptn
  annotations:
    kubernetes.io/ingress.class: nginx
    cert-manager.io/cluster-issuer: <clusterIssuerName>
    nginx.ingress.kubernetes.io/auth-type: basic
    nginx.ingress.kubernetes.io/auth-secret: bridge-basic-auth
    nginx.ingress.kubernetes.io/auth-realm: 'Access only for ture keptns!'
spec:
  tls:
    - hosts:
      - bridge.keptn.your.domain
      secretName: <CertificateSecretName>
  rules:
    - host: bridge.keptn.your.domain
      http:
        paths:
          - backend:
              serviceName: bridge
              servicePort: 8080

$ kubectl apply -f bridge-ingress.yaml
ingress "bridge-ingress" created