fix(goharbor): Fix broken monitoring

This patch adds a new network policy to allow traffic from the
monitoring namespace to access the exporter endpoints. Since it's not
using allow right now, prometheus reports target down.

apps/base/goharbor/kustomization.yaml

@@ -6,5 +6,6 @@ resources:
   - repository.yaml
   - release.yaml
   - ../../../shared/networkpolicies/allow-from-ingress.yaml
+  - ../../../shared/networkpolicies/allow-from-monitoring.yaml
 patchesStrategicMerge:
   - networkpolicy.yaml

apps/base/goharbor/networkpolicy.yaml

@@ -7,3 +7,13 @@ spec:
   podSelector:
     matchLabels:
       app: harbor
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-monitoring
+spec:
+  podSelector:
+    matchLabels:
+      app: harbor
+      release: harbor

shared/networkpolicies/allow-from-monitoring.yaml

+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-monitoring
+spec:
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          monitoring.shivering-isles.com/network-access-required: "true"