unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Expose VictoriaLogs UI at vlogs.unkin.net behind oauth2-proxy #498

Merged
benvin merged 2 commits from benvin/vlogs-external into main 2026-09-27 17:21:41 +10:00
Conversation 0 Commits 2 Files Changed 10
+312 -2

2 Commits

Author SHA1 Message Date
unkin-agent cbdb4caabe Serve vlogs.unkin.net on the external Traefik with the wildcard cert
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
Front the VictoriaLogs UI on the DMZ gateway VIP, terminate TLS with the
reflected Let's Encrypt *.unkin.net wildcard, and publish the apex A record
from the bind-operator unkin.net zone.
 2026-09-27 11:24:58 +10:00
unkin-agent 8c929e44ee Expose VictoriaLogs UI at vlogs.unkin.net behind oauth2-proxy
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
The vlselect query UI is only reachable in-cluster, so log searches need a
port-forward. Front it with the same oauth2-proxy pattern logviewer uses.

- Add apps/base/logging/vlogs: vlogs Gateway (vault-issuer TLS, traefik-internal)
  plus http->https redirect and main HTTPRoute
- Route all traffic through the vlogs-oauth2 Service into oauth2-proxy, which
  upstreams to vlselect-logs:9471
- Gate access on the Authentik vlogs application, group akP-vlogs-admin
- Source OIDC credentials from kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials
 2026-09-27 10:14:26 +10:00