rock/homelab-frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use pod ports (9000/9443) for authentik egress, not service ports
CI / Vet, test, build (push) Successful in 4m3s
Details
CI / Build and push image (push) Successful in 1m31s
Details

Browse Source
This commit is contained in:
Admin Bot
2026-09-04 19:09:43 -07:00
parent d998d7e63c
commit a55e4c7b43
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/network-policy.yaml
+5 -2
View File
@@ -86,15 +86,18 @@ spec:
- protocol: TCP - protocol: TCP
port: 8080 port: 8080
# Allow to IAM (Authentik) for JWKS fetch + API # Allow to IAM (Authentik) for JWKS fetch + API
# Authentik pod listens on 9000 (http) and 9443 (https)
# Service translates 80→9000, 443→9443
# NetworkPolicy matches destination pod port, not service port
- to: - to:
- namespaceSelector: - namespaceSelector:
matchLabels: matchLabels:
kubernetes.io/metadata.name: iam kubernetes.io/metadata.name: iam
ports: ports:
- protocol: TCP - protocol: TCP
port: 80 port: 9000
- protocol: TCP - protocol: TCP
port: 443 port: 9443
# Allow to SQS (queue management service) # Allow to SQS (queue management service)
- to: - to:
- namespaceSelector: - namespaceSelector: