Release v4.68.3 (#1539)

* fix missing coredns entry in alertmanager cnp * Release v4.68.3 * Update CHANGELOG.md --------- Co-authored-by: QuentinBisson <[email protected]>
giantswarm · Feb 19, 2024 · 3c81491 · 3c81491
1 parent 45a4d75
commit 3c81491
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [4.68.3] - 2024-02-19
+
+### Fixed
+
+- Fix alertmanager ciliumnetworkpolicy to allow access to coredns.
+
 ## [4.68.2] - 2024-02-19
 
 ### Fixed
@@ -2478,7 +2484,8 @@ This release was created on release-v3.5.x branch to fix release 3.6.0 see PR#99
 
 - First release.
 
-[Unreleased]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.68.2...HEAD
+[Unreleased]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.68.3...HEAD
+[4.68.3]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.68.2...v4.68.3
 [4.68.2]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.68.1...v4.68.2
 [4.68.1]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.68.0...v4.68.1
 [4.68.0]: https://github.com/giantswarm/prometheus-meta-operator/compare/v4.67.3...v4.68.0

diff --git a/helm/prometheus-meta-operator/templates/alertmanager/cilium-network-policy.yaml b/helm/prometheus-meta-operator/templates/alertmanager/cilium-network-policy.yaml
@@ -12,6 +12,23 @@ spec:
     matchLabels:
       app.kubernetes.io/name: alertmanager
   egress:
+     # Allow all DNS queries
+    - toEndpoints:
+      - matchLabels:
+          "k8s:io.kubernetes.pod.namespace": kube-system
+          "k8s:k8s-app": coredns
+      - matchLabels:
+          "k8s:io.kubernetes.pod.namespace": kube-system
+          "k8s:k8s-app": k8s-dns-node-cache
+      toPorts:
+        - ports:
+           - port: "1053"
+             protocol: ANY
+           - port: "53"
+             protocol: ANY
+          rules:
+            dns:
+              - matchPattern: "*"
     - toEntities:
       ## Needed to access opsgenie.
       - world

diff --git a/pkg/project/project.go b/pkg/project/project.go
@@ -5,7 +5,7 @@ var (
 	gitSHA      = "n/a"
 	name        = "prometheus-meta-operator"
 	source      = "https://github.com/giantswarm/prometheus-meta-operator"
-	version     = "4.68.3-dev"
+	version     = "4.68.3"
 )
 
 func Description() string {