Protecting Prometheus with OAuth2/OIDC

deployment.yaml

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: prometheus-deployment
spec:
  replicas: 1
  template:
    metadata:
      name: prometheus
    spec:
      containers:
      - name: prometheus
        image: quay.io/coreos/prometheus:latest
        args:
          - '--web.listen-address=127.0.0.1:9091'
      - name: proxy
        image: quay.io/gambol99/keycloak-proxy:latest
        imagePullPolicy: Always
        args:
          - --resource=uri=/*
          - --discovery-url=https://discovery-url
          - --client-id=client
          - --client-secret=secret
          - --listen=0.0.0.0:9090
          - --enable-logging=true
          - --enable-json-logging=true
          - --upstream-url=http://127.0.0.1:9091
        ports:
          - name: web
            containerPort: 9090