Prometheus and Grafana of type NodePort?

I'm really curious, why are Prometheus and Grafana services of type NodePort? I don't want them to be publicly accessible on the node. Is it possible to change that and use Traefik as reverse-proxy instead?

Hi @gaui,

Thanks for your interest in Maesh :smiley:

You're right, and I also think that Prometheus and Grafana should not be exposed through a NodePort by default or at least that this behaviour should be configurable.

To expose Prometheus or Grafana through Traefik ingress controller, you have to create an Ingress resource for those services as explained here. I'm not sure that it's Maesh role to create an Ingress resource because it is specific to the user needs, e.g. path/host routing, TLS, entry points, ...

I've created the following issue:

1 Like