Validation: NetworkPolicy pal-enterprises → Postgres + Keycloak (#357)
Ticket
ldraney/pal-e-platform#357 — NetworkPolicy: allow pal-enterprises → Postgres + Keycloak
Shipped: PR #359 merged (
b2aea40), tofu apply completed.Environment
Prod cluster. Namespaces:
pal-enterprises, postgres, keycloak.Checks
| # | Criterion | How to Verify | Result | Evidence |
|---|---|---|---|---|
| 1 | NetworkPolicy allows pal-enterprises → Postgres | <code>kubectl get networkpolicy -n postgres -o yaml</code> | PASS | pal-enterprises namespace in ingress allowlist (line 152 of network-policies.tf) |
| 2 | NetworkPolicy allows pal-enterprises → Keycloak | <code>kubectl get networkpolicy -n keycloak -o yaml</code> | PASS | pal-enterprises namespace in ingress allowlist (line 176 of network-policies.tf) |
| 3 | DB connectivity works | <code>rails runner 'puts ActiveRecord::Base.connection.execute("SELECT 1").to_a'</code> | PASS | Returned <code>{"test" => 1}</code> |
| 4 | No connection errors in logs | <code>kubectl logs -n pal-enterprises deployment/pal-enterprises</code> grep for error/fail/refuse | PASS | Zero matches |
Verdict
PASS — all checks green. Ready for done.