OG T
725392b578
fix(k8s): NetworkPolicy 繞過 kustomize commonLabels
問題: kustomize commonLabels 會加到 NetworkPolicy egress[].to[].podSelector
導致 DNS rule 要求 CoreDNS pods 有 system:awoooi + environment:prod
但 CoreDNS 只有 k8s-app:kube-dns,造成 DNS 解析失敗
修復:
- kustomization.yaml: 移除 02-network-policy.yaml
- cd.yaml: 新增 Apply NetworkPolicy step 單獨套用
2026-03-29 ogt: 根本原因修復
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-29 01:27:29 +08:00
..
2026-03-28 18:04:12 +08:00
2026-03-22 18:57:44 +08:00
2026-03-23 01:19:08 +08:00
2026-03-28 19:06:44 +08:00
2026-03-29 01:27:29 +08:00
2026-03-29 01:19:26 +08:00
2026-03-24 15:19:52 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 15:33:36 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 15:19:52 +08:00
2026-03-28 18:04:12 +08:00
2026-03-22 18:57:44 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 16:16:34 +08:00
2026-03-24 15:19:52 +08:00
2026-03-24 15:19:52 +08:00
2026-03-28 18:04:12 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 15:19:52 +08:00