From ec5e2279942e01e7eec9538bd654b3b077edc9da Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Wed, 8 Jul 2026 15:46:20 +0200
Subject: [PATCH] hel1: Allow mx.itpartner.no

---
 .../network/allow-itpartner-mail-egress.yaml    | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 values/system/hel1/network/allow-itpartner-mail-egress.yaml

diff --git a/values/system/hel1/network/allow-itpartner-mail-egress.yaml b/values/system/hel1/network/allow-itpartner-mail-egress.yaml
new file mode 100644
index 00000000..31390197
--- /dev/null
+++ b/values/system/hel1/network/allow-itpartner-mail-egress.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: allow-itpartner-mail-egress
+spec:
+  endpointSelector: {}
+  egress:
+  - toFQDNs:
+    - matchName: mx.itpartner.no
+    toPorts:
+    - ports:
+      - port: "587"
+        protocol: TCP
+      - port: "465"
+        protocol: TCP
+{{- end }}