fix(base-cluster/cert-manager): metrics collection (#1397)

teutonet · Feb 28, 2025 · 71e1189 · 71e1189
1 parent a4c2144
commit 71e1189
Showing 1 changed file with 21 additions and 2 deletions.
diff --git a/charts/base-cluster/templates/cert-manager/ciliumNetworkPolicy.yaml b/charts/base-cluster/templates/cert-manager/ciliumNetworkPolicy.yaml
@@ -11,13 +11,16 @@ spec:
     matchLabels:
       app.kubernetes.io/name: cert-manager
       app.kubernetes.io/instance: cert-manager
-  ingress:
+  ingress: {{- if .Values.monitoring.prometheus.enabled }}
     - fromEndpoints:
         - matchLabels: {{- include "common.tplvalues.render" (dict "value" (include "common.dict.filterEmptyValues" .Values.global.networkPolicy.metricsLabels) "context" $) | nindent 12 }}
       toPorts:
         - ports:
             - port: "9402"
               protocol: TCP
+    {{- else }}
+    - {}
+    {{- end }}
   egress:
     - toEntities:
         - world # allow access to letsencrypt and the DNS apis
@@ -60,6 +63,14 @@ spec:
         - ports:
             - port: "6080"
               protocol: TCP
+    {{- if .Values.monitoring.prometheus.enabled }}
+    - fromEndpoints:
+        - matchLabels: {{- include "common.tplvalues.render" (dict "value" (include "common.dict.filterEmptyValues" .Values.global.networkPolicy.metricsLabels) "context" $) | nindent 12 }}
+      toPorts:
+        - ports:
+            - port: "9402"
+              protocol: TCP
+    {{- end }}
   egress:
     - toEntities:
         - kube-apiserver
@@ -76,8 +87,16 @@ spec:
     matchLabels:
       app.kubernetes.io/name: cainjector
       app.kubernetes.io/instance: cert-manager
-  ingress:
+  ingress: {{- if .Values.monitoring.prometheus.enabled }}
+    - fromEndpoints:
+        - matchLabels: {{- include "common.tplvalues.render" (dict "value" (include "common.dict.filterEmptyValues" .Values.global.networkPolicy.metricsLabels) "context" $) | nindent 12 }}
+      toPorts:
+        - ports:
+            - port: "9402"
+              protocol: TCP
+    {{- else }}
     - {}
+    {{- end }}
   egress:
     - toEntities:
         - kube-apiserver