[grafana] feat(network policy): extend Ingress

[C4tWithShell]

Add extraIngress parameter to network policy since it does not allow to specify additional sources from the grafana helm chart . For example, I can not set up load balancer in the cluster.

[CLAassistant]

All committers have signed the CLA.

[C4tWithShell]

@Sheikh-Abubaker @jkatsos @maorfr @torstenwalter @Xtigyro @zanhsieh
Appreciate if able to review the PR when available, thanks!

[Sheikh-Abubaker]

@C4tWithShell Thanks for the Contribution! Have you tested the proposed solution ?

[C4tWithShell]

@C4tWithShell Thanks for the Contribution! Have you tested the proposed solution ?

Yes, I did

[Sheikh-Abubaker]

@C4tWithShell If I didn't get you wrong in the extraIngress comments, you've illustrated an example of accepting traffic from NGINX right by setting appropriate matchLabels ? in order to use different ingress sources right ?

[Sheikh-Abubaker]

I believe we could achieve the same result, by adding the appropriate labels in the existing networkpolicy.yaml right here:

helm-charts/charts/grafana/templates/networkpolicy.yaml

Line 49 in e930987

matchLabels:

I'd recommend you to first try and test using the existing networkpolicy.yaml utilizing the above feature and I believe it would help you to achieve the same result as extraIngress.

Incase you want to accept traffic from some different namespace, you could utilize the explicitNamespaceSelector feature for that:

helm-charts/charts/grafana/values.yaml

Line 1326 in e930987

explicitNamespacesSelector: {}

[Sheikh-Abubaker]

@C4tWithShell any updates on this one ?

[C4tWithShell]

@C4tWithShell any updates on this one ?

Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod.
Even though I think it is a little bit confusing to set up network policy indirectly

[Sheikh-Abubaker]

@C4tWithShell any updates on this one ?

Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod.

You mean by using the existing Network Policy right ?

[C4tWithShell]

@C4tWithShell any updates on this one ?

Hi! Yes, I was able to configure ingress network policy with adding the addition label to ingress-nginx pod.

You mean by the existing Network Policy right ?

Yes. By adding the grafana-client label

[Sheikh-Abubaker]

Yes. By adding the grafana-client label

All right! shall I close this one then @C4tWithShell ?