Allowed OpenProject egress to Postgres and Memcached

2026-06-30 23:11:59 +00:00 · 2026-06-30 23:11:59 +00:00 · c5818bcdb4
commit c5818bcdb4
parent cab45b8b79
1 changed files with 19 additions and 0 deletions
--- a/infrastructure/network-policies/openproject/base-egress.yaml
+++ b/infrastructure/network-policies/openproject/base-egress.yaml
@ -8,6 +8,7 @@ spec:
  egress:
    - toEntities:
        - kube-apiserver
+
    - toEndpoints:
        - matchLabels:
            k8s:io.kubernetes.pod.namespace: kube-system
@ -18,3 +19,21 @@ spec:
              protocol: UDP
            - port: "53"
              protocol: TCP
+
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: platform-services
+            app: platform-postgres
+      toPorts:
+        - ports:
+            - port: "5432"
+              protocol: TCP
+
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: openproject
+            app.kubernetes.io/name: memcached
+      toPorts:
+        - ports:
+            - port: "11211"
+              protocol: TCP