fix: add egress rules for iam, sqs, temporal, poimen, storage namespaces

2026-09-04 19:06:50 -07:00
parent ea6974cdad
commit d998d7e63c
1 changed files with 42 additions and 0 deletions
@@ -85,3 +85,45 @@ spec:
    ports:
    - protocol: TCP
      port: 8080
+  # Allow to IAM (Authentik) for JWKS fetch + API
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: iam
+    ports:
+    - protocol: TCP
+      port: 80
+    - protocol: TCP
+      port: 443
+  # Allow to SQS (queue management service)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: sqs
+    ports:
+    - protocol: TCP
+      port: 9090
+  # Allow to Temporal (workflow engine gRPC)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: temporal
+    ports:
+    - protocol: TCP
+      port: 7233
+  # Allow to Poimen (memory/semantic search)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: poimen
+    ports:
+    - protocol: TCP
+      port: 8080
+  # Allow to MinIO (S3-compatible storage)
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: storage
+    ports:
+    - protocol: TCP
+      port: 9000