grafana
[grafana] feat(network policy): extend Ingress
Add extraIngress parameter to network policy since it does not allow to specify additional sources from the grafana helm chart . For example, I can not set up load balancer in the cluster.
@Sheikh-Abubaker @jkatsos @maorfr @torstenwalter @Xtigyro @zanhsieh Appreciate if able to review the PR when available, thanks!
@C4tWithShell Thanks for the Contribution! Have you tested the proposed solution ?
Yes, I did
@C4tWithShell If I didn't get you wrong in the extraIngress comments, you've illustrated an example of accepting traffic from NGINX right by setting appropriate matchLabels ? in order to use different ingress sources right ?
I believe we could achieve the same result, by adding the appropriate labels in the existing networkpolicy.yaml right here: https://github.com/grafana/helm-charts/blob/e930987a79ef7656b10bcd3883b285d6e726121c/charts/grafana/templates/networkpolicy.yaml#L49
I'd recommend you to first try and test using the existing networkpolicy.yaml utilizing the above feature and I believe it would help you to achieve the same result as extraIngress.
Incase you want to accept traffic from some different namespace, you could utilize the explicitNamespaceSelector feature for that:
https://github.com/grafana/helm-charts/blob/e930987a79ef7656b10bcd3883b285d6e726121c/charts/grafana/values.yaml#L1326
@C4tWithShell any updates on this one ?
Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod. Even though I think it is a little bit confusing to set up network policy indirectly
@C4tWithShell any updates on this one ?
Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod.
You mean by using the existing Network Policy right ?
@C4tWithShell any updates on this one ?
Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod.
You mean by the existing Network Policy right ?
Yes. By adding the grafana-client label
Yes. By adding the grafana-client label
All right! shall I close this one then @C4tWithShell ?