feat: add optional basic auth for metrics endpoint

charts/listory/templates/deployment.yaml

@@ -64,6 +64,21 @@ spec:
             {{- if .Values.prometheus.enabled }}
             - name: PROMETHEUS_ENABLED
               value: "true"
+
+            {{- if .Values.prometheus.basicAuth.enabled }}
+            - name: PROMETHEUS_BASIC_AUTH
+              value: "true"
+            - name: PROMETHEUS_BASIC_AUTH_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "listory.fullname" . }}
+                  key: prometheus-basic-auth-username
+            - name: PROMETHEUS_BASIC_AUTH_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "listory.fullname" . }}
+                  key: prometheus-basic-auth-password
+            {{- end }}
             {{- end }}
 
           securityContext:

charts/listory/templates/secrets.yaml

@@ -8,3 +8,8 @@ type: Opaque
 data:
   spotify-client-secret: {{ .Values.spotify.clientSecret | b64enc | quote }}
   jwt-secret: {{ .Values.auth.jwtSecret | b64enc | quote }}
+
+  {{- if .Values.prometheus.basicAuth.enabled }}
+  prometheus-basic-auth-username: {{ .Values.prometheus.basicAuth.username | b64enc | quote }}
+  prometheus-basic-auth-password: {{ .Values.prometheus.basicAuth.password | b64enc | quote }}
+  {{- end }}

charts/listory/values.yaml

@@ -89,3 +89,8 @@ sentry:
 
 prometheus:
   enabled: false
+
+  basicAuth:
+    enabled: false
+    username: ""
+    password: ""