fix: add pal-e-docs to postgres NetworkPolicy ingress #285

Open

forgejo_admin wants to merge 1 commit from 284-add-pal-e-docs-postgres-netpol into main

forgejo_admin commented

2026-04-12 17:58:33 +00:00

Contributor

Summary

Add pal-e-docs namespace to the postgres default-deny-ingress NetworkPolicy so pal-e-docs can reach the CNPG postgres cluster. This was patched manually and needs to be permanent in Terraform.

Changes

terraform/network-policies.tf -- added pal-e-docs namespace selector to postgres NetworkPolicy ingress rules

Review Checklist

tofu fmt passes
Single-line addition, no logic changes
tofu plan -lock=false confirms expected diff

Test Plan

tofu plan -lock=false should show the NetworkPolicy updated with the new ingress rule
Verify pal-e-docs pods can connect to postgres after apply

Closes #284

Manual patch was applied to unblock pal-e-docs; this PR makes it permanent in IaC

🤖 Generated with Claude Code

## Summary Add `pal-e-docs` namespace to the postgres `default-deny-ingress` NetworkPolicy so pal-e-docs can reach the CNPG postgres cluster. This was patched manually and needs to be permanent in Terraform. ## Changes - `terraform/network-policies.tf` -- added `pal-e-docs` namespace selector to postgres NetworkPolicy ingress rules ## Review Checklist - [x] `tofu fmt` passes - [x] Single-line addition, no logic changes - [ ] `tofu plan -lock=false` confirms expected diff ## Test Plan - `tofu plan -lock=false` should show the NetworkPolicy updated with the new ingress rule - Verify pal-e-docs pods can connect to postgres after apply ## Related - Closes #284 ## Related Notes - Manual patch was applied to unblock pal-e-docs; this PR makes it permanent in IaC 🤖 Generated with [Claude Code](https://claude.com/claude-code)

forgejo_admin added 1 commit

2026-04-12 17:58:33 +00:00

fix: add pal-e-docs to postgres NetworkPolicy ingress

ci/woodpecker/push/woodpecker Pipeline was successful

Details

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

de50837294

pal-e-docs namespace needs direct access to the postgres cluster.
Was patched manually; this makes it permanent in Terraform.

Closes #284

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>