fix(netpol): liberar egress ao CIDR de services (ClusterIP) para backups/JWKS

This commit is contained in:
ATM Platform
2026-06-16 20:04:28 +00:00
parent 20b9fd021f
commit f1bb238f19
2 changed files with 4 additions and 2 deletions
+2 -1
View File
@@ -52,8 +52,9 @@ spec:
matchLabels:
kubernetes.io/metadata.name: kube-system
egress:
- to: # intra-namespace (postgres, keycloak)
- to: # intra-namespace (pods) + ClusterIPs (VIP de service, pre-DNAT)
- podSelector: {}
- ipBlock: { cidr: 10.43.0.0/16 }
- to: # DNS (CoreDNS em kube-system)
- namespaceSelector:
matchLabels:
@@ -56,8 +56,9 @@ spec:
matchLabels:
kubernetes.io/metadata.name: kube-system # Traefik (ingress)
egress:
- to: # intra-namespace (postgres, keycloak)
- to: # intra-namespace (pods) + ClusterIPs (VIP de service, pre-DNAT)
- podSelector: {}
- ipBlock: { cidr: 10.43.0.0/16 }
- to: # DNS (CoreDNS em kube-system)
- namespaceSelector:
matchLabels: