WIP keycloak stack (gate probe)

platform/monitoring/grafana-httproute.yaml

@@ -0,0 +1,25 @@
+---
+# Ingress for Grafana at grafana.home.keithjackson.dev (docs/09) — the endpoint of the native-OIDC SSO
+# proof (log in once at Keycloak -> reach Grafana). CR of the Gateway API CRDs — carried by
+# platform-config. Same-namespace backend; parentRef allowed via the monitoring namespace's
+# gateway-access=shared label.
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: grafana
+  namespace: monitoring
+spec:
+  parentRefs:
+    - name: shared
+      namespace: gateway
+      sectionName: https
+  hostnames:
+    - grafana.home.keithjackson.dev
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: kube-prometheus-stack-grafana
+          port: 80