From f8882e86ae99e18c9ba697e149387b72223ce6cd Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Mon, 28 Sep 2026 16:30:31 +0800
Subject: [PATCH] fix(netpol): add poimen:8090 (graphql) + 6379 (redis) to
 egress

Sessions adapter calls poimen-graphql on port 8090 for upsertEntity
mutations and hybridSearch reads. Was only allowing 8080 (memory).
---
 k8s/network-policy.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index d445622..8e05a3c 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -122,7 +122,7 @@ spec:
     ports:
     - protocol: TCP
       port: 7233
-  # Allow to Poimen (memory/semantic search)
+  # Allow to Poimen (memory:8080 + graphql:8090 + redis:6379)
   - to:
     - namespaceSelector:
         matchLabels:
@@ -130,6 +130,10 @@ spec:
     ports:
     - protocol: TCP
       port: 8080
+    - protocol: TCP
+      port: 8090
+    - protocol: TCP
+      port: 6379
   # Allow to Gotify (push notifications)
   - to:
     - namespaceSelector: