Log Analytics

FluentD, Prometheus, and Grafana

To configure Prometheus and Grafana to gather metrics from Artifactory using FluentD, see the log analytics repository. The repository contains artifactory-values.yaml, which deploys Prometheus, Service Monitor, and Grafana with this chart.

Configuring the Network Policy

The network policy controls which ingress and egress traffic the namespace allows. Be as specific as possible to improve system security.

Use the networkpolicy section in values.yaml to define a list of NetworkPolicy objects.

If you omit podSelector, Ingress, or Egress, the chart applies - {} by default, which allows all traffic.

A full example that creates 2 NetworkPolicy objects (permissive — allows all traffic):

networkpolicy:
  # Allows all Ingress and Egress to/from Artifactory.
  - name: artifactory
    podSelector:
      matchLabels:
        app: artifactory
    egress:
    - {}
    ingress:
    - {}
  # Allows connectivity from artifactory pods to postgresql pods, but no traffic leaving postgresql pod.
  - name: postgres
    podSelector:
      matchLabels:
        app: postgresql
    ingress:
    - from:
      - podSelector:
          matchLabels:
            app: artifactory