From 4890a37763b6e9c4bbe36c5ea6cd82aec1243f7d Mon Sep 17 00:00:00 2001 From: William P Date: Thu, 15 May 2025 20:27:04 -0400 Subject: [PATCH] monitoring: only accept ports 9283/9926 --- system-apps/monitoring/configmap.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/system-apps/monitoring/configmap.yaml b/system-apps/monitoring/configmap.yaml index 1655d79..0dcd5d0 100644 --- a/system-apps/monitoring/configmap.yaml +++ b/system-apps/monitoring/configmap.yaml @@ -88,6 +88,9 @@ data: - source_labels: [__meta_kubernetes_service_name] regex: ^rook-ceph-(exporter|mgr)$ action: keep + - source_labels: [__address__] + regex: ^[^:]+:(9283|9926)$ + action: keep - action: labelmap regex: __meta_kubernetes_service_label_(.+) - source_labels: [__meta_kubernetes_namespace]