Add prometheus exporter config

ansible/harbor/base.yaml

@@ -20,4 +20,9 @@
     - name: Install harbor
       tags: ["harbor"]
       import_tasks: tasks/harbor.yaml
-    
+    - name: Install Prometheus exporter
+      tags: ["monitoring"]
+      package:
+        state: present
+        name:
+          - prometheus-node-exporter

ansible/harbor/templates/etc/iptables/rules.v4.j2

@@ -17,6 +17,8 @@
 -A INPUT -p tcp -m tcp --dport {{ ssh.port }} --src 152.66.0.0/8,192.168.0.0/16,10.0.0.0/8 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
+# Accept from the Kubernetes cluster
+-A INPUT -p tcp -m tcp --dport 9100 --src 192.168.101.0/24 -j ACCEPT
 
 -A INPUT -j DROP
 

ansible/harbor/templates/etc/iptables/rules.v6.j2

@@ -17,6 +17,7 @@
 -A INPUT -p tcp -m tcp --dport {{ ssh.port }} --src 2001:738:2001::/48 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
+# TODO node exporter from Kubernetes ipv6
 
 -A INPUT -j DROP