chore(add-ons): Add network policies to operators and monitoring

2026-10-28 15:27:26 +05:30
parent 49ee2a29f5
commit e4346af5ba
8 changed files with 181 additions and 16 deletions
@@ -15,6 +15,33 @@ spec:
    chart: alloy
    helm:
      values: |
+        # Discovers pods through the API and pushes their logs to Loki
+        networkPolicy:
+          enabled: true
+          ingress: []
+          egress:
+            - ports:
+                - port: 53
+                  protocol: UDP
+                - port: 53
+                  protocol: TCP
+              to:
+                - namespaceSelector:
+                    matchLabels:
+                      kubernetes.io/metadata.name: kube-system
+                  podSelector:
+                    matchLabels:
+                      k8s-app: kube-dns
+            - ports:
+                - port: 6443
+                  protocol: TCP
+            - ports:
+                - port: 3100
+                  protocol: TCP
+              to:
+                - podSelector:
+                    matchLabels:
+                      app.kubernetes.io/name: loki
        alloy:
          configMap:
            content: |