mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-09-14 05:01:14 +00:00
kosmosandvhaudiquet
6da9484fa3
Allow the openclaw pod to reach the Radicale CalDAV/CardDAV server (namespace: radicale, port 5232) so Kosmos can read/write Valentin's calendar via the in-cluster service. Mirrors networkpolicy-mail-egress.yaml. Workaround for spec.networkPolicy.additionalEgress not being in the CRD bundled with operator chart 0.39.0 yet (silently pruned).
25 lines
798 B
YAML
25 lines
798 B
YAML
# Supplementary egress policy: the operator's managed default-deny NetworkPolicy
|
|
# only allows DNS + TCP 443 outbound, which blocks HTTP/CalDAV to Radicale.
|
|
# The CR field spec.networkPolicy.additionalEgress would be the native fix,
|
|
# but it is not in the CRD bundled with chart 0.39.0 yet (silently pruned).
|
|
# Revisit after upgrading the operator.
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: openclaw-radicale-egress
|
|
namespace: openclaw
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/instance: openclaw
|
|
app.kubernetes.io/name: openclaw
|
|
policyTypes:
|
|
- Egress
|
|
egress:
|
|
- to:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: radicale
|
|
ports:
|
|
- port: 5232
|
|
protocol: TCP |