Allow access from Prometheus namespace (#51) (#52)

This commit is contained in:
Slava 2023-09-04 15:58:43 +03:00 committed by GitHub
parent 937c3db160
commit 983e1b84cc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 0 deletions

View File

@ -219,6 +219,19 @@ namespace KubernetesWorkflow
} }
} }
} }
},
new V1NetworkPolicyIngressRule
{
FromProperty = new List<V1NetworkPolicyPeer>
{
new V1NetworkPolicyPeer
{
NamespaceSelector = new V1LabelSelector
{
MatchLabels = GetPrometheusNamespaceSelector()
}
}
}
} }
}, },
Egress = new List<V1NetworkPolicyEgressRule> Egress = new List<V1NetworkPolicyEgressRule>
@ -371,6 +384,11 @@ namespace KubernetesWorkflow
return new Dictionary<string, string> { { "kubernetes.io/metadata.name", "default" } }; return new Dictionary<string, string> { { "kubernetes.io/metadata.name", "default" } };
} }
private IDictionary<string, string> GetPrometheusNamespaceSelector()
{
return new Dictionary<string, string> { { "kubernetes.io/metadata.name", "monitoring" } };
}
private IDictionary<string, string> GetAnnotations(ContainerRecipe[] containerRecipes) private IDictionary<string, string> GetAnnotations(ContainerRecipe[] containerRecipes)
{ {
return containerRecipes.First().PodAnnotations.GetAnnotations(); return containerRecipes.First().PodAnnotations.GetAnnotations();