From 18619908629269e2f81f5c05febd1f64c7678c63 Mon Sep 17 00:00:00 2001
From: bo0tzz <git@bo0tzz.me>
Date: Fri, 6 Dec 2024 13:49:24 +0100
Subject: [PATCH] fix: restrict vm endpoints to namespace (#300)

---
 .../apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml | 4 +++-
 .../apps/monitoring/victoria-metrics/ingress/ingress.yaml     | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml b/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml
index 12866e56..daa305d3 100644
--- a/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml
+++ b/kubernetes/apps/monitoring-dev/victoria-metrics/ingress/ingress.yaml
@@ -5,7 +5,9 @@ metadata:
   namespace: monitoring-dev
 spec:
   userSelector: {}
-  userNamespaceSelector: {}
+  userNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: monitoring-dev
   selectAllByDefault: true
   ingress:
     tlsSecretName: vmetrics-tls
diff --git a/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml b/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml
index 384760f3..d058cc5b 100644
--- a/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml
+++ b/kubernetes/apps/monitoring/victoria-metrics/ingress/ingress.yaml
@@ -5,7 +5,9 @@ metadata:
   namespace: monitoring
 spec:
   userSelector: {}
-  userNamespaceSelector: {}
+  userNamespaceSelector:
+    matchLabels:
+      kubernetes.io/metadata.name: monitoring
   selectAllByDefault: true
   ingress:
     tlsSecretName: vmetrics-tls