UNCLASSIFIED - NO CUI

Skip to content

Add networkPolicies to Promtail

Currently promtail is entirely missing network policies. This means that when installed via Big Bang it will have traffic locked down to just the logging namespace (due to the other logging ns network policies).

The main issue is we are currently blocking monitoring traffic.

AC:

  • Add networkPolicies to promtail, following the examples in other repos, to implement "least privilege/access"
  • Validate promtail functions as expected and its service monitors appear up in Prometheus

UNCLASSIFIED - NO CUI