diff --git a/assets/rancher-monitoring/rancher-monitoring-103.0.0+up40.1.2.tgz b/assets/rancher-monitoring/rancher-monitoring-103.0.0+up40.1.2.tgz index 1b2031c67..8584efd89 100644 Binary files a/assets/rancher-monitoring/rancher-monitoring-103.0.0+up40.1.2.tgz and b/assets/rancher-monitoring/rancher-monitoring-103.0.0+up40.1.2.tgz differ diff --git a/charts/rancher-monitoring/103.0.0+up40.1.2/templates/rancher-monitoring/hardened.yaml b/charts/rancher-monitoring/103.0.0+up40.1.2/templates/rancher-monitoring/hardened.yaml index 4a90c1695..04863873a 100644 --- a/charts/rancher-monitoring/103.0.0+up40.1.2/templates/rancher-monitoring/hardened.yaml +++ b/charts/rancher-monitoring/103.0.0+up40.1.2/templates/rancher-monitoring/hardened.yaml @@ -125,4 +125,24 @@ spec: - Ingress - Egress {{- end }} +{{- end }} +--- +{{- if .Values.hardened.k3s.networkPolicy.enabled }} +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: monitoring-coredns-network-policy + namespace: kube-system +spec: + ingress: + - ports: + - port: 9153 + protocol: TCP + - port: 9153 + protocol: UDP + podSelector: + matchLabels: + k8s-app: kube-dns + policyTypes: + - Ingress {{- end }} \ No newline at end of file diff --git a/charts/rancher-monitoring/103.0.0+up40.1.2/values.yaml b/charts/rancher-monitoring/103.0.0+up40.1.2/values.yaml index 84e455fa8..8af63b491 100644 --- a/charts/rancher-monitoring/103.0.0+up40.1.2/values.yaml +++ b/charts/rancher-monitoring/103.0.0+up40.1.2/values.yaml @@ -171,6 +171,11 @@ k3sServer: - sourceLabels: [__metrics_path__] targetLabel: metrics_path +hardened: + k3s: + networkPolicy: + enabled: true + ## KubeADM PushProx Monitoring ## ref: https://github.com/rancher/charts/tree/dev-v2.5-source/packages/rancher-pushprox ## diff --git a/index.yaml b/index.yaml index 9b49f7458..431183853 100755 --- a/index.yaml +++ b/index.yaml @@ -12401,7 +12401,7 @@ entries: catalog.cattle.io/upstream-version: 19.0.3 apiVersion: v2 appVersion: 0.59.1 - created: "2023-09-05T15:59:46.046773-07:00" + created: "2023-09-11T10:56:06.005436-07:00" dependencies: - condition: grafana.enabled name: grafana @@ -12472,7 +12472,7 @@ entries: description: Collects several related Helm charts, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. - digest: a0e7f34b7406f2b416a67087f6775061f38949cb65492d05940437c9a89bde74 + digest: 02f8a1df4177f27bf1632dcce427ed30ece3117c6806096ec5e2674c46e749c5 home: https://github.com/prometheus-operator/kube-prometheus icon: https://raw.githubusercontent.com/prometheus/prometheus.github.io/master/assets/prometheus_logo-cb55bb5c346.png keywords: