fix: allow egress to iam namespace for JWKS validation

2026-09-03 20:43:55 -07:00
parent b86c69cee0
commit a11a609985
1 changed files with 8 additions and 0 deletions
@@ -85,3 +85,11 @@ spec:
    ports:
    - protocol: TCP
      port: 8080
+  # Allow to Authentik for JWT validation (JWKS endpoint)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: iam
+    ports:
+    - protocol: TCP
+      port: 80