From e1ab49dcdc42acad9652ee5978ce5c7c3ae6a01a Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Thu, 3 Sep 2026 20:58:27 -0700
Subject: [PATCH] fix: allow egress to authentik pod port 9000, not service
 port 80

---
 k8s/network-policy.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index 2831c4c..311abf3 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -86,10 +86,11 @@ spec:
     - protocol: TCP
       port: 8080
   # Allow to Authentik for JWT validation (JWKS endpoint)
+  # Service port 80 maps to pod port 9000
   - to:
     - namespaceSelector:
         matchLabels:
           kubernetes.io/metadata.name: iam
     ports:
     - protocol: TCP
-      port: 80
+      port: 9000