Test grafana k8s HTTPS TLS certificate

Signed-off-by: Sergio López <slopezma@redhat.com>

Author: slopezz

manifests/observability-hub/overlays/k8s/grafana/grafana-patch.yaml

@@ -6,3 +6,12 @@ spec:
   service:
     spec:
       type: LoadBalancer
+      ports:
+        - name: https
+          port: 443
+          protocol: TCP
+          targetPort: https
+  tls:
+    certSecretRef:
+      name: grafana-tls
+    insecureSkipVerify: true

manifests/observability-hub/overlays/k8s/grafana/grafana-tls-certificate.yaml

@@ -0,0 +1,22 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: selfsigned-issuer
+spec:
+  selfSigned: {}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: grafana-tls
+spec:
+  secretName: grafana-service-tls
+  dnsNames:
+  - grafana-service
+  - grafana-service.monitoring
+  - grafana-service.monitoring.svc
+  - grafana-service.monitoring.sandbox.svc.cluster.local
+  issuerRef:
+    name: selfsigned-issuer
+    kind: Issuer
+    group: cert-manager.io

manifests/observability-hub/overlays/k8s/kustomization.yaml

@@ -18,6 +18,7 @@ resources:
   - ./thanos/manifests/thanos-ruler-serviceAccount.yaml
   - ./thanos/manifests/thanos-ruler-statefulset.yaml
   - ./grafana/datasource.yaml
+  - ./grafana/grafana-tls-certificate.yaml
 
 patches:
   - target: