Skip to content

Enabling user alerts

This is administrator-facing documentation associated with this user guide. Please read that one first.

Important

Alertmanager should no longer be access via an Ingress, since this circumvents access control and audit logs. Please find the updated access method in the user guide linked above.

Perform the following configuration changes in wc-config.yaml:

  1. Update the user.namespaces list to include alertmanager.
  2. Set user.alertmanager.enabled=true.
  3. Set user.alertmanager.namespace=alertmanager.
  4. Ensure user.alertmanager.ingress.enabled is false.

Then apply ck8s-apps.

Example

Please find below an example taken from wc-config.yaml, which was tested with compliantkubernetes-apps v0.17.0:

user:
  ## This only controls if the namespaces should be created, user RBAC is always created.
  createNamespaces: true
  ## List of user namespaces to create.
  namespaces:
    - alertmanager
    - demo1
    - demo2
    - demo3
  ## List of users to create RBAC rules for.
  adminUsers:
    - cristian.klein@elastisys.com
    - lars.larsson@elastisys.com
    - admin@example.com
  ## User controlled alertmanager configuration.
  alertmanager:
    enabled: true
    ## Namespace in which to install alertmanager
    namespace: alertmanager
    ## Create basic-auth protected ingress to alertmanager
    ingress:
      enabled: false