fix(agent99): allow api egress to windows relay

2026-07-10 00:40:57 +08:00
parent e2cfbaabc8
commit a859f66470
1 changed files with 10 additions and 0 deletions
--- a/k8s/awoooi-prod/02-network-policy.yaml
+++ b/k8s/awoooi-prod/02-network-policy.yaml
@@ -183,6 +183,16 @@ spec:
        - protocol: TCP
          port: 8080

+    # 允許 AWOOI API 將脫敏 Alertmanager 告警送到 99 Agent99 relay
+    # 2026-07-10 Codex: Agent99 SRE relay consumes sanitized JSON only, then
+    # queues allowlisted remediation via the 99-side control loop.
+    - to:
+        - ipBlock:
+            cidr: 192.168.0.99/32
+      ports:
+        - protocol: TCP
+          port: 8787
+
    # 允許訪問 K8s API + K3s master SSH (Executor 執行 kubectl/host diagnosis)
    # 2026-03-23 修復: Y 按鈕執行超時
    # 重要: ClusterIP (10.43.0.1:443) 會路由到實際端點 (192.168.0.120:6443)