diff --git a/CHANGELOG.md b/CHANGELOG.md index 00d6f543b56bd3806f2247e7a17ae9955ac1a37c..4c73c17e0f6521d97ece93c43eca57acf54f90c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [0.0.8-bb.1] - 2021-08-26 + +## Added + +- Added istio sidecar scraping network policy + ## [0.0.8-bb.0] - 2021-08-16 ### Added diff --git a/chart/Chart.yaml b/chart/Chart.yaml index fb89401e7890f3be2f50ff2101da81de51847eb2..44bbd5aa28e08491b96a0dc352ee0b66e429a70c 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: twistlock -version: 0.0.8-bb.0 +version: 0.0.8-bb.1 appVersion: 21.04.439 dependencies: - name: gluon diff --git a/chart/templates/networkpolicies/allow-sidecar-scraping.yaml b/chart/templates/networkpolicies/allow-sidecar-scraping.yaml new file mode 100644 index 0000000000000000000000000000000000000000..fe9945442eafd90277818cfcd10f8c2b6cc29540 --- /dev/null +++ b/chart/templates/networkpolicies/allow-sidecar-scraping.yaml @@ -0,0 +1,22 @@ +{{- if and .Values.networkPolicies.enabled .Values.istio.enabled }} +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: allow-sidecar-scraping + namespace: {{ .Release.Namespace }} +spec: + podSelector: {} + policyTypes: + - Ingress + ingress: + - from: + - namespaceSelector: + matchLabels: + app.kubernetes.io/name: monitoring + podSelector: + matchLabels: + app: prometheus + ports: + - protocol: TCP + port: 15020 +{{- end }}