You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If network policy is enabled in Helm chart via networkPolicy.enabled=true and networkPolicy.ingress is configured, the traffic is still being rejected. This is due to a wrong port name reference http in NetworkPolicy:
Expected behavior
Network policies should enable ingress traffic to gateway or reader/writer.
Environment:
Infrastructure: Kubernetes
Deployment tool: helm
The text was updated successfully, but these errors were encountered:
vholer
changed the title
Ingress traffic rejected by wrong NetworkPolicy in Loki chart 6.5.0 (3.0.0)
Ingress traffic rejected by NetworkPolicy in Loki chart 6.5.0 (3.0.0)
May 7, 2024
Describe the bug
If network policy is enabled in Helm chart via
networkPolicy.enabled=true
andnetworkPolicy.ingress
is configured, the traffic is still being rejected. This is due to a wrong port name referencehttp
in NetworkPolicy:loki/production/helm/loki/templates/networkpolicy.yaml
Line 69 in 19fef93
while related Service port names are
http-metrics
:loki/production/helm/loki/templates/gateway/service-gateway.yaml
Line 31 in 19fef93
loki/production/helm/loki/templates/read/service-read.yaml
Line 27 in 19fef93
loki/production/helm/loki/templates/write/service-write.yaml
Line 27 in 19fef93
Recent change in gateway's Service broke this: 79b876b#diff-431f854797520c4320975bebaa267bcac088a12671e360093d87bf7193abd438R31
Expected behavior
Network policies should enable ingress traffic to gateway or reader/writer.
Environment:
The text was updated successfully, but these errors were encountered: