riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 24 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

feat(poimen): restrict the GraphQL server to the memory proxy #104

Merged
rock merged 1 commits from feat/poimen-graphql-netpol into main 2026-11-03 21:38:35 +00:00
Conversation 0 Commits 1 Files Changed 2
+30
1 Commits
Author SHA1 Message Date
rock 9f15e4eb3c feat(poimen): restrict the GraphQL server to the memory proxy 
poimen-graphql is already ClusterIP on 8090 with no Ingress, so it is off the
internet. It had no NetworkPolicy, so every pod in the cluster could reach it.

The only caller is poimen-memory, which forwards its /graphql route to
MEM_GQL_PORT=8090. No other workload references the service.

Allows 8090 from poimen-memory pods only.
 2026-11-04 05:38:26 +08:00