UNCLASSIFIED - NO CUI

Update NetworkPolicies to support Distrbuted Mode

To support #1 (closed), the network policies that are in place need to be adjusted to use different labels depending on the strategy being used. Already some present in upstream chart: https://github.com/grafana/helm-charts/blob/9b6d3f1f0b986ef60b0917e095500d66841b8861/charts/loki-simple-scalable/templates/networkpolicy.yaml

Distributed:

Read Nodes

app.kubernetes.io/component: read

https://github.com/grafana/helm-charts/blob/9b6d3f1f0b986ef60b0917e095500d66841b8861/charts/loki-simple-scalable/templates/read/_helpers-read.tpl#L13

Ingress from:

  • Istio Ingress
  • Prometheus

Egress:

  • Write Nodes

Write Nodes

app.kubernetes.io/component: write

https://github.com/grafana/helm-charts/blob/9b6d3f1f0b986ef60b0917e095500d66841b8861/charts/loki-simple-scalable/templates/write/_helpers-write.tpl#L13

Ingress From:

  • ReadNodes
  • PromTail
  • Prometheus

Egress:

  • Storage

Monolith:

Don't have anything yet: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/loki/-/blob/main/chart/values.yaml#L164

Ingress:

  • Istio
  • Prometheus

Egress:

  • Storage

image

See: https://grafana.com/docs/loki/latest/fundamentals/architecture/

Edited by runyontr