make charts

charts/rancher-monitoring/103.0.0+up40.1.2/templates/rancher-monitoring/hardened.yaml

@@ -125,4 +125,24 @@ spec:
   - Ingress
   - Egress
 {{- end }}
+{{- end }}
+---
+{{- if .Values.hardened.k3s.networkPolicy.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: monitoring-coredns-network-policy
+  namespace: kube-system
+spec:
+  ingress:
+    - ports:
+        - port: 9153
+          protocol: TCP
+        - port: 9153
+          protocol: UDP
+  podSelector:
+    matchLabels:
+      k8s-app: kube-dns
+  policyTypes:
+    - Ingress
 {{- end }}

charts/rancher-monitoring/103.0.0+up40.1.2/values.yaml

@@ -171,6 +171,11 @@ k3sServer:
       - sourceLabels: [__metrics_path__]
         targetLabel: metrics_path
 
+hardened:
+  k3s:  
+    networkPolicy:
+      enabled: true
+
 ## KubeADM PushProx Monitoring
 ## ref: https://github.com/rancher/charts/tree/dev-v2.5-source/packages/rancher-pushprox
 ##

index.yaml

@@ -12401,7 +12401,7 @@ entries:
       catalog.cattle.io/upstream-version: 19.0.3
     apiVersion: v2
     appVersion: 0.59.1
-    created: "2023-09-05T15:59:46.046773-07:00"
+    created: "2023-09-11T10:56:06.005436-07:00"
     dependencies:
     - condition: grafana.enabled
       name: grafana
@@ -12472,7 +12472,7 @@ entries:
     description: Collects several related Helm charts, Grafana dashboards, and Prometheus
       rules combined with documentation and scripts to provide easy to operate end-to-end
       Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
-    digest: a0e7f34b7406f2b416a67087f6775061f38949cb65492d05940437c9a89bde74
+    digest: 02f8a1df4177f27bf1632dcce427ed30ece3117c6806096ec5e2674c46e749c5
     home: https://github.com/prometheus-operator/kube-prometheus
     icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png
     keywords: