alertmanager/networkPolicy: Allow cluster peer-to-peer communication
Signed-off-by: GitHub <noreply@github.com> (cherry picked from commit df68b8d1da5d2d91b9502d4be67063c2c497e0cb)
This commit is contained in:
committed by
ArthurSens
parent
acaf2fe0e7
commit
3f3b56e247
@@ -113,19 +113,38 @@ function(params) {
|
||||
},
|
||||
policyTypes: ['Egress', 'Ingress'],
|
||||
egress: [{}],
|
||||
ingress: [{
|
||||
from: [{
|
||||
podSelector: {
|
||||
matchLabels: {
|
||||
'app.kubernetes.io/name': 'prometheus',
|
||||
ingress: [
|
||||
{
|
||||
from: [{
|
||||
podSelector: {
|
||||
matchLabels: {
|
||||
'app.kubernetes.io/name': 'prometheus',
|
||||
},
|
||||
},
|
||||
},
|
||||
}],
|
||||
ports: std.map(function(o) {
|
||||
port: o.port,
|
||||
protocol: 'TCP',
|
||||
}, am.service.spec.ports),
|
||||
}],
|
||||
}],
|
||||
ports: std.map(function(o) {
|
||||
port: o.port,
|
||||
protocol: 'TCP',
|
||||
}, am.service.spec.ports),
|
||||
},
|
||||
// Alertmanager cluster peer-to-peer communication
|
||||
{
|
||||
from: [{
|
||||
podSelector: {
|
||||
matchLabels: {
|
||||
'app.kubernetes.io/name': 'alertmanager',
|
||||
},
|
||||
},
|
||||
}],
|
||||
ports: [{
|
||||
port: 9094,
|
||||
protocol: 'TCP',
|
||||
}, {
|
||||
port: 9094,
|
||||
protocol: 'UDP',
|
||||
}],
|
||||
},
|
||||
],
|
||||
},
|
||||
},
|
||||
|
||||
|
||||
Reference in New Issue
Block a user