From f0b5379cf9568a80b7c0e989a8b86f91d6dd9140 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Wed, 27 Apr 2022 03:21:31 +0200
Subject: [PATCH] fix(starboard): Sort out internal network policies
This patch allows monitoring to access the starboard exporter and allow
containers to communicate within the same namespace.
---
infrastructure/starboard/kustomization.yaml | 2 +-
infrastructure/starboard/networkpolicy.yaml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/infrastructure/starboard/kustomization.yaml b/infrastructure/starboard/kustomization.yaml
index aa20e1fc5..cbeaece97 100644
--- a/infrastructure/starboard/kustomization.yaml
+++ b/infrastructure/starboard/kustomization.yaml
@@ -6,7 +6,7 @@ resources:
- repository.yaml
- release.yaml
- monitoring.yaml
- - ../../shared/networkpolicies/allow-from-ingress.yaml
+ - ../../shared/networkpolicies/allow-from-same-namespace.yaml
- ../../shared/networkpolicies/allow-from-monitoring.yaml
patchesStrategicMerge:
- networkpolicy.yaml
diff --git a/infrastructure/starboard/networkpolicy.yaml b/infrastructure/starboard/networkpolicy.yaml
index a268d31e2..ccec8a45b 100644
--- a/infrastructure/starboard/networkpolicy.yaml
+++ b/infrastructure/starboard/networkpolicy.yaml
@@ -2,7 +2,7 @@
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
- name: allow-from-ingress
+ name: allow-from-monitoring
spec:
podSelector:
matchExpressions:
--
GitLab