fix: add egress rules for iam, sqs, temporal, poimen, storage namespaces

2026-09-04 19:06:50 -07:00
parent ea6974cdad
commit d998d7e63c
1 changed files with 42 additions and 0 deletions
@@ -85,3 +85,45 @@ spec:
    ports:
    - protocol: TCP
      port: 8080
  # Allow to IAM (Authentik) for JWKS fetch + API
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: iam
    ports:
    - protocol: TCP
      port: 80
    - protocol: TCP
      port: 443
  # Allow to SQS (queue management service)
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: sqs
    ports:
    - protocol: TCP
      port: 9090
  # Allow to Temporal (workflow engine gRPC)
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: temporal
    ports:
    - protocol: TCP
      port: 7233
  # Allow to Poimen (memory/semantic search)
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: poimen
    ports:
    - protocol: TCP
      port: 8080
  # Allow to MinIO (S3-compatible storage)
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: storage
    ports:
    - protocol: TCP
      port: 9000