kubernetes_sd_config scrape targets ignoring NetworkPolicy isolation
Goal I want Prometheus (assume a recent 2.x release) running inside a Kubernetes cluster to scrape only pods it can actually reach. My cluster uses NetworkPolicy to isolate several namespaces, and I want the target list to reflect that isolation without hand-maintained relabel rules for every policy change. Observed constraint From my reading of the kubernet
prometheus