fix: enable api access to grafana namespace

micahg · Aug 24, 2024 · b807e6b · b807e6b
1 parent 458b145
commit b807e6b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 23 deletions.
diff --git a/chart/templates/api-deployment.yaml b/chart/templates/api-deployment.yaml
@@ -111,12 +111,6 @@ spec:
     - ports:
       - port: "443"
         protocol: TCP
-  - toFQDNs:
-    - matchName: {{ .Values.otelDomain }}
-    toPorts:
-    - ports:
-      - port: "{{ .Values.otelPort }}"
-        protocol: TCP
   - toEndpoints:
     - matchLabels:
         "k8s:io.kubernetes.pod.namespace": kube-system
@@ -128,6 +122,13 @@ spec:
       rules:
         dns:
         - matchPattern: "*"
+  - toEndpoints:
+    - matchLabels:
+        "k8s:io.kubernetes.pod.namespace": grafana
+    toPorts:
+    - ports:
+      - port: "{{ .Values.otelPort }}"
+        protocol: TCP
   - toEndpoints:
     -matchLabels:
       "app": {{ .Values.mongoName }}
@@ -143,19 +144,4 @@ spec:
     toPorts:
     - ports:
       - port: "3000"
-        protocol: TCP
----
-apiVersion: "cilium.io/v2"
-kind: CiliumNetworkPolicy
-metadata:
-  name: {{ .Values.apiAppName }}-allow-outbound-otel
-  namespace: {{ .Values.namespace }}
-spec:
-  endpointSelector:
-    matchLabels:
-      app: {{ .Values.apiAppName }}
-  egress:
-  - toServices:
-    - k8sService:
-        serviceName: grafana-k8s-monitoring-alloy
-        namespace: grafana
+        protocol: TCP
diff --git a/packages/api/src/server.ts b/packages/api/src/server.ts
@@ -19,7 +19,7 @@ import mongoose from "mongoose";
 import { WebSocketServer } from "ws";
 import { ValueType, metrics } from "@opentelemetry/api";
 
-// mongoose.set('debug', true); //
+// mongoose.set('debug', true);
 
 log.info(`System starting in ${process.env.NODE_ENV}`);