From e03fb945247c12fc04e0cdb3536056d8c17b3ea2 Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Fri, 17 Nov 2023 15:49:29 +0100
Subject: [PATCH] Allow prometheus access to kubelet

---
 .../templates/kubelet-clusterwide-networkpolicy.yaml           | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml b/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
index 7d58dde..3a878fd 100644
--- a/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
+++ b/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
@@ -10,7 +10,8 @@ spec:
     # prometheus -> kubelet
     - fromEndpoints:
         - matchLabels:
-            app: kube-prometheus-stack-prometheus
+            io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
+            io.kubernetes.pod.namespace: observability
       toPorts:
         - ports:
             - port: '10250'