Add landscaping-assistant to MinIO NetworkPolicy allowlist #383

New issue

Closed

opened 2026-05-25 12:31:40 +00:00 by ldraney · 0 comments

ldraney commented

2026-05-25 12:31:40 +00:00

Owner

Type

Bug

Lineage

Standalone — discovered during photo upload testing after PR ldraney/landscaping-assistant#36 deployed to prod.

Repo

ldraney/pal-e-platform

What Broke

Landscaping-assistant pod gets Seahorse::Client::NetworkingError (Failed to open TCP connection to minio.minio.svc.cluster.local:9000 (Connection refused)) when uploading photos. Returns 500 to the user. The S3 PUT succeeds but subsequent operations fail.

Repro Steps

Open landscaping-assistant prod URL
Go to Photos tab
Upload a photo
Observe: 500 Internal Server Error

Expected Behavior

Photo uploads succeed. The landscaping-assistant pod should be able to reach MinIO on port 9000.

Environment

Cluster/namespace: landscaping-assistant (prod)
Service version/commit: 4c82c6d
Related alerts: none (manual discovery)

Acceptance Criteria

landscaping-assistant added to MinIO NetworkPolicy ingress allowlist in network-policies.tf
tofu plan shows only the NetworkPolicy change
Photo upload succeeds after tofu apply

project-landscaping-assistant — project this affects
ldraney/landscaping-assistant#33 — original upload feature issue

### Type Bug ### Lineage Standalone — discovered during photo upload testing after PR ldraney/landscaping-assistant#36 deployed to prod. ### Repo `ldraney/pal-e-platform` ### What Broke Landscaping-assistant pod gets `Seahorse::Client::NetworkingError (Failed to open TCP connection to minio.minio.svc.cluster.local:9000 (Connection refused))` when uploading photos. Returns 500 to the user. The S3 PUT succeeds but subsequent operations fail. ### Repro Steps 1. Open landscaping-assistant prod URL 2. Go to Photos tab 3. Upload a photo 4. Observe: 500 Internal Server Error ### Expected Behavior Photo uploads succeed. The landscaping-assistant pod should be able to reach MinIO on port 9000. ### Environment - Cluster/namespace: landscaping-assistant (prod) - Service version/commit: `4c82c6d` - Related alerts: none (manual discovery) ### Acceptance Criteria - [ ] `landscaping-assistant` added to MinIO NetworkPolicy ingress allowlist in `network-policies.tf` - [ ] `tofu plan` shows only the NetworkPolicy change - [ ] Photo upload succeeds after `tofu apply` ### Related - `project-landscaping-assistant` — project this affects - `ldraney/landscaping-assistant#33` — original upload feature issue