UNCLASSIFIED - NO CUI

NetworkPolicy to allow https is broken when service port is not 8443

Bug

Description

Kubernetes NetworkPolicy resources' rules apply to pods, but the port specified in the ingress-allow-https NetworkPolicy specifies the port defined for the Keycloak service, which is arbitrary, and doesn't necessarily match up with the static container port value of 8443. The ingress-allow-https NetworkPolicy's port should be statically assigned to 8443 until the codecentric chart makes the container port configurable.

BigBang Version

2.54.0