Expose Linkerd-viz dashboard via helm/terraform

[AlexPerkbox]

Having to run linkerd viz dashboard on multiple clusters is a bit of a pain and a solution to this would be exposing the dashboard as explained in the official docs. The docs do a good job of describing how to set this up with some example, however our setup relies heavily on terraform/helm and we utilise linkerd-viz helm chart. Unfortunately, linkerd-viz helm chart does not provide an option for exposing the dashboard via ingress as that could potentially introduce a security vulnerability.

What we have done instead is create the ingress resource using terraform's kubernetes_ingress_v1 and here is the config. Mind you, this approach is does not any auth mechanism, so the Secret resource is omitted but it can be added if need be. Namespace remains as is - linkerd-viz

resource "kubernetes_ingress_v1" "linkerd-viz" {
  metadata {
    name = "web-ingress"
    namespace = "linkerd-viz"
    annotations = {
      "nginx.ingress.kubernetes.io/upstream-vhost" = "$service_name.$namespace.svc.cluster.local:8084",
      "nginx.ingress.kubernetes.io/configuration-snippet" = "proxy_set_header Origin ''; proxy_hide_header l5d-remote-ip; proxy_hide_header l5d-server-id;"
    }
  }

  spec {
    ingress_class_name = "nginx"

    rule {
      host = "<<insert your domain here>>"
      http {
        path {
          path_type = "Prefix"
          backend {
            service {
              name = "web"
              port {
                number = 8084
              }
            }
          }

          path = "/"
        }
      }
    }
  }
}