From e04bfbef471b9697a107557274f87c3b43243bbb Mon Sep 17 00:00:00 2001 From: "Franz.Germann" Date: Mon, 2 Jun 2025 11:51:46 +0000 Subject: [PATCH] disabled unauthorized access to vlogs and vmetrics --- .../victoria-k8s-stack/values.yaml | 30 +++++++++---------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/otc/observability.think-ahead.cloud/stacks/observability/victoria-k8s-stack/values.yaml b/otc/observability.think-ahead.cloud/stacks/observability/victoria-k8s-stack/values.yaml index 080ec3e..b339d77 100644 --- a/otc/observability.think-ahead.cloud/stacks/observability/victoria-k8s-stack/values.yaml +++ b/otc/observability.think-ahead.cloud/stacks/observability/victoria-k8s-stack/values.yaml @@ -763,23 +763,23 @@ vmauth: annotations: nginx.ingress.kubernetes.io/force-ssl-redirect: "true" cert-manager.io/cluster-issuer: main - host: o12y.penguin-observability.think-ahead.cloud + host: o12y.observability.think-ahead.cloud tlsHosts: - - o12y.penguin-observability.think-ahead.cloud + - o12y.observability.think-ahead.cloud tlsSecretName: vmauth-tls-secret - unauthorizedUserAccessSpec: - # -- Flag, that allows to disable default VMAuth unauthorized user access config - disabled: false - discover_backend_ips: true - url_map: - - src_paths: - - '/insert/elasticsearch/.*' - url_prefix: - - 'http://vlogs-victorialogs:9428' - - src_paths: - - '/api/v1/write/.*' - url_prefix: - - 'http://vmsingle-victoria-k8s-stack-victoria-metrics-k8s-stack:8428' + # unauthorizedUserAccessSpec: + # # -- Flag, that allows to disable default VMAuth unauthorized user access config + # disabled: false + # discover_backend_ips: true + # url_map: + # - src_paths: + # - '/insert/elasticsearch/.*' + # url_prefix: + # - 'http://vlogs-victorialogs:9428' + # - src_paths: + # - '/api/v1/write/.*' + # url_prefix: + # - 'http://vmsingle-victoria-k8s-stack-victoria-metrics-k8s-stack:8428' vmagent: # -- Create VMAgent CR