We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
I would be great to add NetworkPolicy to all components.
Here's an example for a thanos-store:
networkPolicy: { kind: 'NetworkPolicy', apiVersion: 'networking.k8s.io/v1', metadata: { name: 'thanos-store', namespace: cfg.namespace, }, spec: { podSelector: { matchLabels: { 'app.kubernetes.io/name': 'thanos-store', }, }, egress: [{}], // Allow all outside egress to connect to object storage ingress: [{ from: [{ namespaceSelector: { matchLabels: { 'kubernetes.io/metadata.name': cfg.namespace, }, }, podSelector: { matchLabels: { 'app.kubernetes.io/name': 'thanos-query', }, }, }], }], policyTypes: ['Egress'], }, },
Example PR to add the network policy to individual components: https://github.com/parca-dev/demo-deployments/pull/189/files This should really live in kube-thanos and not in each individual downstream project.
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
I would be great to add NetworkPolicy to all components.
Here's an example for a thanos-store:
Example PR to add the network policy to individual components: https://github.com/parca-dev/demo-deployments/pull/189/files
This should really live in kube-thanos and not in each individual downstream project.
The text was updated successfully, but these errors were encountered: