2martens/cloud-configuration
1
0
Fork 0
mirror of https://github.com/2martens/cloud-configuration.git synced 2026-10-17 08:37:56 +02:00
Code Issues Activity

Allow prometheus access to host

Browse Source
This commit is contained in:
2martens
2023-11-17 15:49:06 +01:00
parent d2887eeda2
commit 9ad03f352e
1 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/cluster_setup/templates/monitoring-clusterwide-networkpolicy.yaml
+37
View File
@@ -0,0 +1,37 @@
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
name: monitoring
spec:
nodeSelector:
# apply to all nodes
matchLabels: {}
ingress:
# prometheus -> monitoring ports
- fromEndpoints:
- matchLabels:
io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
io.kubernetes.pod.namespace: observability
toPorts:
- ports:
- port: '9100'
protocol: TCP
- port: '9962'
protocol: TCP
- port: '9963'
protocol: TCP
- port: '9965'
protocol: TCP
- port: '10257'
protocol: TCP
- port: '10259'
protocol: TCP
egress:
- toEndpoints:
- matchLabels:
io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
io.kubernetes.pod.namespace: observability
toPorts:
- ports:
- port: '9090'
protocol: TCP