fix(atlantis): Allow openfga egress via svc

2025-10-16 15:22:35 +02:00
parent db1ecabeae
commit a1e8d4d36a
1 changed files with 15 additions and 0 deletions
@@ -0,0 +1,15 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-egress-openfga
+  namespace: {{ .Release.Namespace }}
+spec:
+  egress:
+  - toEndpoints:
+    - matchLabels:
+        k8s:io.kubernetes.pod.namespace: openfga
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: atlantis
+{{- end }}