- op: add
  path: /spec/ingress/0/from/-
  value:
    podSelector:
      matchLabels:
        app.kubernetes.io/name: traefik
    namespaceSelector:
      matchLabels:
        kubernetes.io/metadata.name: kube-system
- op: add
  path: /spec/ingress/-
  value:
    from:
      - podSelector:
          matchLabels:
            app: thanos-querier
        namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: monitoring
    ports:
      - port: 10901
        protocol: TCP