fix: add pal-e-docs to postgres NetworkPolicy ingress #286

Open
forgejo_admin wants to merge 1 commit from 284-fix-add-pal-e-docs-namespace-to-postgres into main
Contributor

Summary

Add pal-e-docs namespace to the postgres default-deny-ingress NetworkPolicy so pal-e-docs pods can reach the CNPG postgres cluster. This was manually patched and needs to be permanent in Terraform.

Changes

  • terraform/network-policies.tf: Added pal-e-docs namespace selector to postgres NetworkPolicy ingress rules

tofu plan Output

Single resource change: kubernetes_manifest.netpol_postgres will be updated in-place to add the pal-e-docs namespace ingress rule.

Test Plan

  • tofu fmt passes (verified)
  • tofu plan -lock=false should show only the postgres NetworkPolicy update
  • After apply, verify pal-e-docs pods can connect to postgres

Review Checklist

  • tofu fmt clean
  • Single-line addition, no other changes
  • Matches manual patch already applied to cluster

None.

Closes #284

## Summary Add `pal-e-docs` namespace to the postgres `default-deny-ingress` NetworkPolicy so pal-e-docs pods can reach the CNPG postgres cluster. This was manually patched and needs to be permanent in Terraform. ## Changes - `terraform/network-policies.tf`: Added `pal-e-docs` namespace selector to postgres NetworkPolicy ingress rules ## tofu plan Output Single resource change: `kubernetes_manifest.netpol_postgres` will be updated in-place to add the `pal-e-docs` namespace ingress rule. ## Test Plan - `tofu fmt` passes (verified) - `tofu plan -lock=false` should show only the postgres NetworkPolicy update - After apply, verify pal-e-docs pods can connect to postgres ## Review Checklist - [x] `tofu fmt` clean - [x] Single-line addition, no other changes - [x] Matches manual patch already applied to cluster ## Related Notes None. ## Related Closes #284
fix: add pal-e-docs to postgres NetworkPolicy ingress
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/pr/woodpecker Pipeline was successful
bb06e9b167
Closes #284

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/pr/woodpecker Pipeline was successful
This pull request has changes conflicting with the target branch.
  • terraform/network-policies.tf
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 284-fix-add-pal-e-docs-namespace-to-postgres:284-fix-add-pal-e-docs-namespace-to-postgres
git switch 284-fix-add-pal-e-docs-namespace-to-postgres
Sign in to join this conversation.
No description provided.