fix(netpol): allow api-gateway egress to notifications:80 (Gotify) (#48)

NetworkPolicy was blocking api-gateway → gotify.notifications.svc.cluster.local:80. Adds egress rule to `notifications` namespace on port 80. Required for `X-Service: notification` + `X-Resource: send-message` to deliver push notifications through the gateway. --------- Co-authored-by: Admin Bot <[email protected]> Reviewed-on: #48
2026-09-27 14:13:36 +00:00
parent ef5e736673
commit 0bde5dd8fe
1 changed files with 8 additions and 0 deletions
@@ -130,6 +130,14 @@ spec:
    ports:
    - protocol: TCP
      port: 8080
+  # Allow to Gotify (push notifications)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: notifications
+    ports:
+    - protocol: TCP
+      port: 80
  # Allow to MinIO (S3-compatible storage)
  # Service `minio` listens on port 80 (targetPort 9000).
  # Headless `minio-cluster-hl` is 9000. Allow both.