From 4d32ac67d2b1af6acb406bca40cdc19a6707fc3f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ivan=20=28=EC=9D=B4=EB=B0=98=29=20Porta?=
 <porta.ivan@outlook.com>
Date: Tue, 14 Jan 2025 03:39:23 +0900
Subject: [PATCH] Add missing policy (#1887)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Author: Ivan (이반) Porta, Committer: GitHub

Co-authored-by: Flynn <kflynn@users.noreply.github.com>
---
 .../2-edge/tasks/external-prometheus.md       | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/linkerd.io/content/2-edge/tasks/external-prometheus.md b/linkerd.io/content/2-edge/tasks/external-prometheus.md
index d127017e51..1ac7b70e60 100644
--- a/linkerd.io/content/2-edge/tasks/external-prometheus.md
+++ b/linkerd.io/content/2-edge/tasks/external-prometheus.md
@@ -127,6 +127,25 @@ scrape interval:
     evaluation_interval: 10s
 ```
 
+Finally, you need to apply the following policy.
+
+```yaml
+apiVersion: policy.linkerd.io/v1alpha1
+kind: AuthorizationPolicy
+metadata:
+  name: prometheus-admin-federate
+  namespace: linkerd-viz
+spec:
+  targetRef:
+    group: policy.linkerd.io
+    kind: Server
+    name: prometheus-admin
+  requiredAuthenticationRefs:
+    - group: policy.linkerd.io
+      kind: NetworkAuthentication
+      name: kubelet
+```
+
 The running configuration of the builtin prometheus can be used as a reference.
 
 ```bash