Side-car Scraping Network Policy

CHANGELOG.md

@@ -3,6 +3,12 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [0.0.8-bb.1] - 2021-08-26
+
+## Added
+
+- Added istio sidecar scraping network policy
+
 ## [0.0.8-bb.0] - 2021-08-16
 
 ### Added

chart/Chart.yaml

 apiVersion: v2
 name: twistlock
-version: 0.0.8-bb.0
+version: 0.0.8-bb.1
 appVersion: 21.04.439
 dependencies:
   - name: gluon

chart/templates/networkpolicies/allow-sidecar-scraping.yaml

+{{- if and .Values.networkPolicies.enabled .Values.istio.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-sidecar-scraping
+  namespace: {{ .Release.Namespace }}
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          app.kubernetes.io/name: monitoring
+      podSelector:
+        matchLabels:
+          app: prometheus
+    ports:
+    - protocol: TCP
+      port: 15020
+{{- end }}