UNCLASSIFIED - NO CUI

Skip to content

NetworkPolicy to allow https is broken when service port is not 8443

Bug

Description

Kubernetes NetworkPolicy resources' rules apply to pods, but the port specified in the ingress-allow-https NetworkPolicy specifies the port defined for the Keycloak service, which is arbitrary, and doesn't necessarily match up with the static container port value of 8443. The ingress-allow-https NetworkPolicy's port should be statically assigned to 8443 until the codecentric chart makes the container port configurable.

BigBang Version

2.54.0