fix: restrict vm endpoints to namespace (#300)

immich-app · Dec 6, 2024 · 1861990 · 1861990
1 parent ae64d32
commit 1861990
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml b/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml
@@ -5,7 +5,9 @@ metadata:
   namespace: monitoring-dev
 spec:
   userSelector: {}
-  userNamespaceSelector: {}
+  userNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: monitoring-dev
   selectAllByDefault: true
   ingress:
     tlsSecretName: vmetrics-tls

diff --git a/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml b/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml
@@ -5,7 +5,9 @@ metadata:
   namespace: monitoring
 spec:
   userSelector: {}
-  userNamespaceSelector: {}
+  userNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: monitoring
   selectAllByDefault: true
   ingress:
     tlsSecretName: vmetrics-tls