From be473989100068718a2330bfb9ee0156c2e0d3fa Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@tobru.ch>
Date: Wed, 15 Dec 2021 21:46:25 +0100
Subject: [PATCH] expose management center and update config path

---
 mosquitto/configmap.yaml    |  2 +-
 mosquitto/ingress-mgmt.yaml | 26 ++++++++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)
 create mode 100644 mosquitto/ingress-mgmt.yaml

diff --git a/mosquitto/configmap.yaml b/mosquitto/configmap.yaml
index 2cb10a8..003bb44 100644
--- a/mosquitto/configmap.yaml
+++ b/mosquitto/configmap.yaml
@@ -18,7 +18,7 @@ data:
 
     # Plugin
     plugin /usr/lib/mosquitto_dynamic_security.so
-    plugin_opt_config_file /tmp/dynamic-security.json
+    plugin_opt_config_file /mosquitto/data/dynamic-security.json
 
     # Persistence configuration
     persistence true
diff --git a/mosquitto/ingress-mgmt.yaml b/mosquitto/ingress-mgmt.yaml
new file mode 100644
index 0000000..5d584c9
--- /dev/null
+++ b/mosquitto/ingress-mgmt.yaml
@@ -0,0 +1,26 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    ingress.kubernetes.io/ssl-redirect: "true"
+  labels:
+    app: management-center
+  name: management-center
+spec:
+  rules:
+  - host: admin.mqtt.tbrnt.ch
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: management-center
+            port:
+              number: 8088
+  tls:
+  - hosts:
+    - admin.mqtt.tbrnt.ch
+    secretName: ingress-cert