feat(jupyterhub): enable service monitor

jupyterhub/jupyterhub-values.gomplate.yaml

@@ -39,6 +39,7 @@ hub:
     JupyterHub:
       authenticator_class: generic-oauth
       admin_access: false
+      authenticate_prometheus: false
 
     Authenticator:
       enable_auth_state: true
@@ -132,6 +133,19 @@ hub:
   podSecurityContext:
     fsGroup: {{ .Env.JUPYTER_FSGID }}
 
+  networkPolicy:
+    ingress:
+      - from:
+          - podSelector:
+              matchLabels:
+                hub.jupyter.org/network-access-hub: "true"
+          - namespaceSelector:
+              matchLabels:
+                kubernetes.io/metadata.name: {{ .Env.PROMETHEUS_NAMESPACE }}
+        ports:
+          - port: http
+            protocol: TCP
+
 proxy:
   service:
     type: ClusterIP