aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

fix(paperclip): use fromEntities: cluster for cross-namespace ingress (HOM-8) #210

Merged
aaron merged 1 commit from fix/paperclip-cilium-entities into live 2026-06-01 05:18:51 +00:00
Conversation 0 Commits 1 Files changed 1 +2 -3
aaron commented 2026-06-01 05:18:47 +00:00
Owner
Copy link

The CiliumNetworkPolicy CRD rejects "*" as a value for io.kubernetes.pod.namespace in matchLabels. This PR switches the ingress rule to fromEntities: - cluster, which is the idiomatic Cilium way to allow all in-cluster pods to reach the Paperclip API on port 3100.

Fixes the ArgoCD sync error on the paperclip application.

Refs: HOM-8

The CiliumNetworkPolicy CRD rejects "*" as a value for `io.kubernetes.pod.namespace` in `matchLabels`. This PR switches the ingress rule to `fromEntities: - cluster`, which is the idiomatic Cilium way to allow all in-cluster pods to reach the Paperclip API on port 3100. Fixes the ArgoCD sync error on the `paperclip` application. Refs: HOM-8
fix(paperclip): use fromEntities: cluster for cross-namespace ingress (HOM-8)
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
685893229f 
The CiliumNetworkPolicy CRD rejects '*' as a value for
io.kubernetes.pod.namespace in matchLabels. Switch to
fromEntities: - cluster to allow all in-cluster pods to reach
the Paperclip API on port 3100.

Refs: HOM-8
aaron merged commit c0ec659f45 into live 2026-06-01 05:18:51 +00:00
aaron deleted branch fix/paperclip-cilium-entities 2026-06-01 05:18:51 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!210
No description provided.