Currently, all services (clowder, jenkins, prometheus, kibana, grafana, etc) are available without authentication via ingress rules. With the nginx ingress controller, it should be possible to set up a secret used for authentication:

https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx (section "Authentication")

1. Test that the official image does what we want or build from contrib latest
2. Services in kube-system: setup admin password as secret to be used for kube-system
3. User services:

Some cases:

• user namespace services - namespace / password
• kube-system - admin user / password
• default - ??? (none?)