From 81166e46648578982f2387f03d9765c6f6f3101f Mon Sep 17 00:00:00 2001
From: GTRekter <porta.ivan@outlook.com>
Date: Tue, 3 Dec 2024 03:49:22 +0900
Subject: [PATCH] =?UTF-8?q?Add=20missing=20policy=20Author:=20Ivan=20(?=
 =?UTF-8?q?=EC=9D=B4=EB=B0=98)=20Porta,=20Committer:=20GitHub?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../2-edge/tasks/external-prometheus.md       | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/linkerd.io/content/2-edge/tasks/external-prometheus.md b/linkerd.io/content/2-edge/tasks/external-prometheus.md
index 0703bc166b..dc55763576 100644
--- a/linkerd.io/content/2-edge/tasks/external-prometheus.md
+++ b/linkerd.io/content/2-edge/tasks/external-prometheus.md
@@ -127,6 +127,25 @@ scrape interval:
     evaluation_interval: 10s
 ```
 
+Finally, you need to apply the following policy.
+
+```yaml
+apiVersion: policy.linkerd.io/v1alpha1
+kind: AuthorizationPolicy
+metadata:
+  name: prometheus-admin-federate
+  namespace: linkerd-viz
+spec:
+  targetRef:
+    group: policy.linkerd.io
+    kind: Server
+    name: prometheus-admin
+  requiredAuthenticationRefs:
+    - group: policy.linkerd.io
+      kind: NetworkAuthentication
+      name: kubelet
+```
+
 The running configuration of the builtin prometheus can be used as a reference.
 
 ```bash