Update .gitignore to include generated noble-lab-ui-urls.md and enhance README.md with new role documentation. Refactor noble.yml to incorporate noble_landing_urls role for improved URL management. Add ingress configurations for alertmanager, prometheus, longhorn, and vault to support TLS termination via Traefik. Update network policies and values.yaml for vault to allow traffic from Traefik. These changes aim to streamline deployment and enhance service accessibility.

ansible/roles/noble_landing_urls/defaults/main.yml

@@ -0,0 +1,43 @@
+---
+# Regenerated when **noble_landing_urls** runs (after platform stack). Paths match Traefik + cert-manager Ingresses.
+noble_landing_urls_dest: "{{ noble_repo_root }}/ansible/output/noble-lab-ui-urls.md"
+
+# When true, run kubectl against the cluster to fill Argo CD / Grafana passwords in the markdown (requires working kubeconfig).
+noble_landing_urls_fetch_credentials: true
+
+noble_lab_ui_entries:
+  - name: Argo CD
+    description: GitOps UI (sync, apps, repos)
+    namespace: argocd
+    service: argocd-server
+    url: https://argo.apps.noble.lab.pcenicni.dev
+  - name: Grafana
+    description: Dashboards, Loki explore (logs)
+    namespace: monitoring
+    service: kube-prometheus-grafana
+    url: https://grafana.apps.noble.lab.pcenicni.dev
+  - name: Prometheus
+    description: Prometheus UI (queries, targets) — lab; protect in production
+    namespace: monitoring
+    service: kube-prometheus-kube-prome-prometheus
+    url: https://prometheus.apps.noble.lab.pcenicni.dev
+  - name: Alertmanager
+    description: Alertmanager UI (silences, status)
+    namespace: monitoring
+    service: kube-prometheus-kube-prome-alertmanager
+    url: https://alertmanager.apps.noble.lab.pcenicni.dev
+  - name: Headlamp
+    description: Kubernetes UI (cluster resources)
+    namespace: headlamp
+    service: headlamp
+    url: https://headlamp.apps.noble.lab.pcenicni.dev
+  - name: Longhorn
+    description: Storage volumes, nodes, backups
+    namespace: longhorn-system
+    service: longhorn-frontend
+    url: https://longhorn.apps.noble.lab.pcenicni.dev
+  - name: Vault
+    description: Secrets engine UI (after init/unseal)
+    namespace: vault
+    service: vault
+    url: https://vault.apps.noble.lab.pcenicni.dev