diff --git a/infra/monitoring/grafana-ingress.yaml b/infra/monitoring/grafana-ingress.yaml
new file mode 100755
index 0000000..d630560
--- /dev/null
+++ b/infra/monitoring/grafana-ingress.yaml
@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: grafana-ingress
+  namespace: monitoring
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`monitoring.namesny.com`)
+    kind: Rule
+    middlewares:
+    - name: "auth-authelia@kubernetescrd"
+    services:
+    - name: kube-prometheus-stack-grafana
+      port: 80
diff --git a/infra/monitoring/kustomization.yaml b/infra/monitoring/kustomization.yaml
new file mode 100644
index 0000000..7791638
--- /dev/null
+++ b/infra/monitoring/kustomization.yaml
@@ -0,0 +1,20 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+generatorOptions:
+  disableNameSuffixHash: true
+namespace: monitoring
+resources:
+- namespace.yaml
+- grafana-ingress.yaml
+
+  #generators:
+  #- ./secret-generator.yaml
+
+helmCharts:
+- name: kube-prometheus-stack
+  releaseName: kube-prometheus-stack
+  version: 55.11.0
+  repo: https://prometheus-community.github.io/helm-charts
+  namespace: monitoring
+  valuesFile: values.yaml
+
diff --git a/infra/monitoring/namespace.yaml b/infra/monitoring/namespace.yaml
new file mode 100755
index 0000000..d325236
--- /dev/null
+++ b/infra/monitoring/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: monitoring
diff --git a/infra/monitoring/values.yaml b/infra/monitoring/values.yaml
new file mode 100644
index 0000000..711ae42
--- /dev/null
+++ b/infra/monitoring/values.yaml
@@ -0,0 +1,12 @@
+defaultRules:
+  rules:
+    etcd: false
+    kubeControllerManager: true 
+
+kubeEtcd:
+  enabled: false
+kubeControllerManager:
+  enabled: false
+kubeScheduler:
+  enabled: false
+