Skip to content

Commit 14ce844

Browse files
committed
DO NOT MERGE: Allow access to monitoring ports from all namespaces
Make sure test pods in e2e-aws-ovn-serial are able to reach monitoring ports. If this passes tests, changes are needed in the origin tests to add a network policy for exec pods.
1 parent 66e8615 commit 14ce844

File tree

2 files changed

+11
-9
lines changed

2 files changed

+11
-9
lines changed

manifests/0000_70_dns-operator_01-network-policy.yaml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -46,10 +46,11 @@ spec:
4646
matchLabels:
4747
apiserver: "true"
4848
ingress:
49-
- from:
50-
- namespaceSelector:
51-
matchLabels:
52-
kubernetes.io/metadata.name: openshift-monitoring
53-
ports:
49+
- ports:
5450
- protocol: TCP
5551
port: 9393
52+
# TODO: Disabling namespace selector for testing purposes. DO NOT MERGE
53+
# from:
54+
#- namespaceSelector:
55+
#matchLabels:
56+
#kubernetes.io/metadata.name: openshift-monitoring

pkg/manifests/assets/dns/networkpolicy-allow.yaml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,11 @@ spec:
1919
- ports:
2020
- protocol: TCP
2121
port: 9154
22-
from:
23-
- namespaceSelector:
24-
matchLabels:
25-
kubernetes.io/metadata.name: openshift-monitoring
22+
# TODO: Disabling the namespace selector for testing purposes. DO NOT MERGE
23+
#from:
24+
#- namespaceSelector:
25+
#matchLabels:
26+
#kubernetes.io/metadata.name: openshift-monitoring
2627
# Allow the dns operator namespaces to hit the healthcheck ports
2728
- ports:
2829
- protocol: TCP

0 commit comments

Comments
 (0)