From cab45b8b793b841fc13678512e3dacc63793f640 Mon Sep 17 00:00:00 2001
From: Arvind Prabhakar <arvind.prabhakar@symcrest.com>
Date: Tue, 30 Jun 2026 23:05:39 +0000
Subject: [PATCH] Rename base Cilium egress policies by namespace

---
 .../network-policies/forgejo/base-egress.yaml   | 17 ++++++++++++++++-
 .../openproject/base-egress.yaml                |  2 +-
 .../network-policies/pgadmin/base-egress.yaml   |  2 +-
 .../platform-services/base-egress.yaml          |  2 +-
 4 files changed, 19 insertions(+), 4 deletions(-)

diff --git a/infrastructure/network-policies/forgejo/base-egress.yaml b/infrastructure/network-policies/forgejo/base-egress.yaml
index 794cc95..f95cac4 100644
--- a/infrastructure/network-policies/forgejo/base-egress.yaml
+++ b/infrastructure/network-policies/forgejo/base-egress.yaml
@@ -1,13 +1,18 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: forgejo-base-egress
   namespace: forgejo
+
 spec:
   endpointSelector: {}
+
   egress:
+    # Allow access to the Kubernetes API
     - toEntities:
         - kube-apiserver
+
+    # Allow DNS lookups
     - toEndpoints:
         - matchLabels:
             k8s:io.kubernetes.pod.namespace: kube-system
@@ -18,3 +23,13 @@ spec:
               protocol: UDP
             - port: "53"
               protocol: TCP
+
+    # Allow Forgejo to talk to PostgreSQL
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: platform-services
+            app: platform-postgres
+      toPorts:
+        - ports:
+            - port: "5432"
+              protocol: TCP
diff --git a/infrastructure/network-policies/openproject/base-egress.yaml b/infrastructure/network-policies/openproject/base-egress.yaml
index 8196264..71b8143 100644
--- a/infrastructure/network-policies/openproject/base-egress.yaml
+++ b/infrastructure/network-policies/openproject/base-egress.yaml
@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: openproject-base-egress
   namespace: openproject
 spec:
   endpointSelector: {}
diff --git a/infrastructure/network-policies/pgadmin/base-egress.yaml b/infrastructure/network-policies/pgadmin/base-egress.yaml
index 6ab05a7..bcaf86a 100644
--- a/infrastructure/network-policies/pgadmin/base-egress.yaml
+++ b/infrastructure/network-policies/pgadmin/base-egress.yaml
@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: pgadmin-base-egress
   namespace: pgadmin
 spec:
   endpointSelector: {}
diff --git a/infrastructure/network-policies/platform-services/base-egress.yaml b/infrastructure/network-policies/platform-services/base-egress.yaml
index e3a4ffc..3bf269e 100644
--- a/infrastructure/network-policies/platform-services/base-egress.yaml
+++ b/infrastructure/network-policies/platform-services/base-egress.yaml
@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: platform-services-base-egress
   namespace: platform-services
 spec:
   endpointSelector: {}