fix(gitea): allow Prometheus to scrape in-cluster gitea /metrics #165

2026-07-13T15:27:54Z

claude-bot commented

2026-07-13 15:27:54 +00:00

The apps default-deny CNP drops monitoring->gitea:3000, so the repointed scrape times out and TargetDown stays firing. Adds a scoped CNP allowing monitoring ns -> gitea :3000.

claude-bot added 1 commit 2026-07-13 15:27:54 +00:00

fix(gitea): allow Prometheus (monitoring ns) to scrape /metrics c69fa9ac8a

After the LXC->in-cluster cutover the gitea scrape target became an in-cluster
pod, which the apps default-deny-ingress CiliumNetworkPolicy drops (it allows
only same-ns / home-assistant / host). Prometheus scrapes time out (context
deadline exceeded) and TargetDown keeps firing. Add a scoped CNP allowing the
monitoring namespace to reach the gitea pod on :3000. Monitoring egress is
unrestricted (its only policy is ingress-only), so this ingress allow is
sufficient.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HQhvu1mrQ7EgwLhrzdNyY7

k.renner merged commit 27adf660b0 into master

2026-07-13 15:30:23 +00:00

k.renner referenced this issue from a commit

2026-07-13 15:30:24 +00:00

Merge pull request 'fix(gitea): allow Prometheus to scrape in-cluster gitea /metrics' (#165) from fix/gitea-metrics-netpol into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#165