Skip to content

Commit 470923d

Browse files
committed
DO NOT MERGE: Allow access to monitoring ports from all namespaces
Make sure test pods in e2e-aws-ovn-serial are able to reach monitoring ports. If this passes tests, changes are needed in the origin tests to add a network policy for exec pods.
1 parent 66e8615 commit 470923d

File tree

2 files changed

+10
-8
lines changed

2 files changed

+10
-8
lines changed

manifests/0000_70_dns-operator_01-network-policy.yaml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -46,10 +46,11 @@ spec:
4646
matchLabels:
4747
apiserver: "true"
4848
ingress:
49-
- from:
50-
- namespaceSelector:
51-
matchLabels:
52-
kubernetes.io/metadata.name: openshift-monitoring
49+
# TODO: Disabling namespace selector for testing purposes. DO NOT MERGE
50+
#- from:
51+
#- namespaceSelector:
52+
#matchLabels:
53+
#kubernetes.io/metadata.name: openshift-monitoring
5354
ports:
5455
- protocol: TCP
5556
port: 9393

pkg/manifests/assets/dns/networkpolicy-allow.yaml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,11 @@ spec:
1919
- ports:
2020
- protocol: TCP
2121
port: 9154
22-
from:
23-
- namespaceSelector:
24-
matchLabels:
25-
kubernetes.io/metadata.name: openshift-monitoring
22+
# TODO: Disabling the namespace selector for testing purposes. DO NOT MERGE
23+
#from:
24+
#- namespaceSelector:
25+
#matchLabels:
26+
#kubernetes.io/metadata.name: openshift-monitoring
2627
# Allow the dns operator namespaces to hit the healthcheck ports
2728
- ports:
2829
- protocol: TCP

0 commit comments

Comments
 (0)