k8s/dashboard: setup mtls

ttrssreal · Dec 22, 2024 · b4c2aab · b4c2aab
1 parent f0db5eb
commit b4c2aab
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/k8s/k8s-dashboard.yaml b/k8s/k8s-dashboard.yaml
@@ -26,6 +26,12 @@ spec:
               scope: cluster
             hosts:
               - dashboard.k8s.jessie.cafe
+            annotations:
+              nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
+              # FIXME: part of declarative secret management
+              nginx.ingress.kubernetes.io/auth-tls-secret: default/ca-secret
+              nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+              nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"
   destination:
     server: "https://kubernetes.default.svc"
     namespace: kubernetes-dashboard