VictoriaMetrics Operator

---
# 部署 vmauth
apiVersion: operator.victoriametrics.com/v1beta1
kind: VMAuth
metadata:
  name: example
  namespace: default
spec:
  ingress:
    class_name: nginx
    tlsHosts: []
    tlsSecretName:
    extraRules:
    extraTls:
  # false 则要求配置 userSelector, userNamespaceSelector
  selectAllByDefault: true
  # vmuser label 选择
  userSelector:
    matchLabels:
      vmauth.victoriametrics.com/instance: demo
  # ns label 选择
  userNamespaceSelector:

---
# 为 vmauth 配置 user
apiVersion: operator.victoriametrics.com/v1beta1
kind: VMUser
metadata:
  name: example
  labels:
    vmauth.victoriametrics.com/instance: demo
spec:
  username: simple-user
  password: simple-password
  passwordRef:
  generatePassword: false
  bearerToken:
  targetRefs:
    - crd:
        # VMAgent,VMAlert,VMAlertmanager,VMSingle,VMCluster/vmselect,VMCluster/vminsert,VMCluster/vmstorage
        kind: VMSingle
        name: example
        namespace: default
      paths: ['/.*']
    - static:
        url: http://vmalert-example.default.svc:8080
      paths: ['/api/v1/groups', '/api/v1/alerts']
      target_path_suffix:
      headers:
        - X-Org-ID: xyz