From 0bf649f1444466ba4bb102064fc11a9e9846de8e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Wed, 25 Jun 2025 13:23:58 +0200
Subject: [PATCH] fix(prom): Allow egress to tempo

---
 .../manifests/policies/allow-tempo-egress.yaml      | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 values/prometheus/manifests/policies/allow-tempo-egress.yaml

diff --git a/values/prometheus/manifests/policies/allow-tempo-egress.yaml b/values/prometheus/manifests/policies/allow-tempo-egress.yaml
new file mode 100644
index 00000000..6ed485e2
--- /dev/null
+++ b/values/prometheus/manifests/policies/allow-tempo-egress.yaml
@@ -0,0 +1,13 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-tempo
+  namespace: prometheus
+spec:
+  description: Allow Tempo
+  egress:
+    - toFQDNs:
+        - matchName: tempo.tempo.svc.cluster.local
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: grafana