fix(amethyst): grafana-postgres allow status probe from cnpg

timtorChen · Feb 11, 2024 · 5b1e979 · 5b1e979
1 parent 771fdc9
commit 5b1e979
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml b/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml
@@ -25,6 +25,15 @@ spec:
         - ports:
             - protocol: TCP
               port: "5432"
+    - # connection from cnpg
+      fromEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: cnpg
+            app.kubernetes.io/instance: cnpg
+      toPorts:
+        - ports:
+            - protocol: TCP
+              port: "8000"
   egress:
     - # dns resolution
       toEndpoints: