apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: opensearch-dashboards
  namespace: logging
spec:
  interval: 30m
  dependsOn:
    - name: opensearch
  chart:
    spec:
      chart: opensearch-dashboards
      version: "3.9.0"
      sourceRef:
        kind: HelmRepository
        name: opensearch
  values:
    opensearchHosts: "https://opensearch-cluster-master.logging.svc:9200"
    opensearchAccount:
      secret: opensearch-dashboards-account
    resources:
      requests:
        cpu: 250m
        memory: 512Mi
      limits:
        cpu: "1"
        memory: 1Gi
    extraVolumes:
      - name: homelab-ca
        configMap:
          name: homelab-ca
    extraVolumeMounts:
      - name: homelab-ca
        mountPath: /usr/share/opensearch-dashboards/config/homelab-ca
        readOnly: true
    config:
      opensearch_dashboards.yml: |
        server.host: "0.0.0.0"
        opensearch.hosts: ["https://opensearch-cluster-master.logging.svc:9200"]
        opensearch.ssl.verificationMode: full
        opensearch.ssl.certificateAuthorities: ["/usr/share/opensearch-dashboards/config/homelab-ca/ca.crt"]
        opensearch.requestHeadersAllowlist: ["securitytenant", "Authorization"]
        opensearch_security.multitenancy.enabled: false
        opensearch_security.cookie.secure: true
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: opensearch-dashboards
  namespace: logging
spec:
  parentRefs:
    - name: homelab
      namespace: traefik
  hostnames:
    - dashboards.apps.internal
  rules:
    - backendRefs:
        - name: opensearch-dashboards
          port: 5601