I'm really curious, why are Prometheus and Grafana services of type NodePort? I don't want them to be publicly accessible on the node. Is it possible to change that and use Traefik as reverse-proxy instead?
Thanks for your interest in Maesh
You're right, and I also think that
Grafana should not be exposed through a
NodePort by default or at least that this behaviour should be configurable.
Grafana through Traefik ingress controller, you have to create an
Ingress resource for those services as explained here. I'm not sure that it's Maesh role to create an
Ingress resource because it is specific to the user needs, e.g. path/host routing, TLS, entry points, ...
I've created the following issue: https://github.com/containous/maesh/issues/631