From 314ec0cda7db028f51b081d8d91c9bccc2bf708c Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Tue, 29 Sep 2026 09:33:38 +0200
Subject: [PATCH] chore(prometheus): drop dead grafana routes and cert

No grafana is deployed from this stack, so grafana-prod/grafana-local only ever served 503s. Live objects already deleted directly; this keeps git from resurrecting them on the next deploy.
---
 prometheus-stack/k8s/certificates.yaml | 13 ----------
 prometheus-stack/k8s/ingress.yaml      | 36 --------------------------
 2 files changed, 49 deletions(-)
 delete mode 100644 prometheus-stack/k8s/ingress.yaml

diff --git a/prometheus-stack/k8s/certificates.yaml b/prometheus-stack/k8s/certificates.yaml
index fef8eb1..3efcaa6 100644
--- a/prometheus-stack/k8s/certificates.yaml
+++ b/prometheus-stack/k8s/certificates.yaml
@@ -1,18 +1,5 @@
 apiVersion: cert-manager.io/v1
 kind: Certificate
-metadata:
-  name: grafana-prod-tls
-  namespace: prometheus
-spec:
-  secretName: grafana-prod-tls
-  dnsNames:
-    - grafana.forust.xyz
-  issuerRef:
-    name: letsencrypt-prod
-    kind: ClusterIssuer
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
 metadata:
   name: internal-wildcard-tls
   namespace: prometheus
diff --git a/prometheus-stack/k8s/ingress.yaml b/prometheus-stack/k8s/ingress.yaml
deleted file mode 100644
index bdb0451..0000000
--- a/prometheus-stack/k8s/ingress.yaml
+++ /dev/null
@@ -1,36 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: grafana-prod
-  namespace: prometheus
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`grafana.forust.xyz`)
-      kind: Rule
-      middlewares:
-        - name: crowdsec-bouncer
-          namespace: crowdsec
-      services:
-        - name: prometheus-stack-grafana
-          port: 80
-  tls:
-    secretName: grafana-prod-tls
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: grafana-local
-  namespace: prometheus
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - match: Host(`grafana.workstation.internal`) || Host(`grafana.gigaforust.internal`)
-      kind: Rule
-      services:
-        - name: prometheus-stack-grafana
-          port: 80
-  tls:
-    secretName: internal-wildcard-tls