Add network policy for prometheus monitoring namespace access

[spbolton]

Description

Add a Kubernetes network policy to allow access from the prometheus monitoring namespace for metrics scraping. This will enable proper security controls while maintaining monitoring capabilities.

Acceptance Criteria

• [Define what needs to be accomplished]

Additional Notes

[Any additional context or notes]

[spbolton]

Implementation Example

Here's an example of the NetworkPolicy that should be created:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-prometheus-scraping
  namespace: sbolton
spec:
  podSelector:
    matchLabels:
      app: dotcms
      cust: sbolton
  policyTypes:
  - Ingress
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: monitoring
      podSelector:
        matchLabels:
          app.kubernetes.io/name: prometheus
    ports:
    - protocol: TCP
      port: 8090

This NetworkPolicy:

• Applies to dotCMS pods with the specified labels
• Allows ingress traffic only from prometheus pods in the monitoring namespace
• Restricts access to port 8090 (metrics port)
• Provides secure access for metrics scraping while blocking other traffic

[spbolton]

This issue is being addressed in PR #71