fix(infra-monitoring): auth authentik with tls

infra-monitoring/templates/alertmanager/authentik-application.yaml

@@ -35,6 +35,7 @@ spec:
         domain: "https://{{ .Values.commons.auth.authentik.domain }}"
       provider:
         enabled: {{ not .Values.alertmanager.auth.anonymous.enabled }}
+        type: "proxy"
         proxy:
           externalHost: {{ $url | quote }}
           skipPathRegex: |
@@ -42,6 +43,21 @@ spec:
           ingress:
             enabled: true
             domain: {{ $domain | quote }}
+            backend: {{ .Values.commons.auth.authentik.backend }}
+            {{- with $.Values.commons.ingress.annotations }}
+            annotations:
+              {{- toYaml . | nindent 14 }}
+            {{- end }}
+            {{- if $.Values.commons.ingress.tls.enabled }}
+            tls:
+              {{- with $.Values.commons.ingress.tls.override }}
+              {{- toYaml . | nindent 14 }}
+              {{- else }}
+              - secretName: "infra-monitoring-alertmanager-cert"
+                hosts:
+                  - {{ $domain | quote }}
+              {{- end }}
+            {{- end }}
 
       groups:
         - slug: "app: infra"

infra-monitoring/templates/karma/authentik-application.yaml

@@ -44,6 +44,20 @@ spec:
             enabled: true
             domain: {{ $domain | quote }}
             backend: {{ .Values.commons.auth.authentik.backend }}
+            {{- with $.Values.commons.ingress.annotations }}
+            annotations:
+              {{- toYaml . | nindent 14 }}
+            {{- end }}
+            {{- if $.Values.commons.ingress.tls.enabled }}
+            tls:
+              {{- with $.Values.commons.ingress.tls.override }}
+              {{- toYaml . | nindent 14 }}
+              {{- else }}
+              - secretName: "infra-monitoring-karma-cert"
+                hosts:
+                  - {{ $domain | quote }}
+              {{- end }}
+            {{- end }}
 
       groups:
         - slug: "app: infra"

infra-monitoring/templates/prometheus/authentik-application.yaml

@@ -44,6 +44,20 @@ spec:
             enabled: true
             domain: {{ $domain | quote }}
             backend: {{ .Values.commons.auth.authentik.backend }}
+            {{- with $.Values.commons.ingress.annotations }}
+            annotations:
+              {{- toYaml . | nindent 14 }}
+            {{- end }}
+            {{- if $.Values.commons.ingress.tls.enabled }}
+            tls:
+              {{- with $.Values.commons.ingress.tls.override }}
+              {{- toYaml . | nindent 14 }}
+              {{- else }}
+              - secretName: "infra-monitoring-prometheus-cert"
+                hosts:
+                  - {{ $domain | quote }}
+              {{- end }}
+            {{- end }}
 
       groups:
         - slug: "app: infra"