From 0567d547cee4f05becf32da85b671bb8a680281d Mon Sep 17 00:00:00 2001 From: jgrusewski Date: Tue, 19 May 2026 12:24:22 +0200 Subject: [PATCH] fix(argo): lob-backtest-sweep pods need component=train for GitLab egress Pods labeled `component: backtest` only match the `argo-base-egress` NetworkPolicy (DNS, 443, MinIO, Mattermost). The ensure-binary step needs SSH-to-gitlab-shell on port 2222, which is gated by `argo-train-workflow` (selects `component=train`). Relabel to `train` so the same NetworkPolicy that lets alpha-perception clone the repo also covers lob-backtest-sweep. Egress shape (compile, GPU run, PVC writes) is identical to a training run. Co-Authored-By: Claude Opus 4.7 (1M context) --- infra/k8s/argo/lob-backtest-sweep-template.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/infra/k8s/argo/lob-backtest-sweep-template.yaml b/infra/k8s/argo/lob-backtest-sweep-template.yaml index 4e06e1672..e68b898c0 100644 --- a/infra/k8s/argo/lob-backtest-sweep-template.yaml +++ b/infra/k8s/argo/lob-backtest-sweep-template.yaml @@ -35,7 +35,7 @@ metadata: labels: app.kubernetes.io/name: lob-backtest-sweep app.kubernetes.io/part-of: foxhunt - app.kubernetes.io/component: backtest + app.kubernetes.io/component: train # reuses argo-train-workflow NetworkPolicy egress (port 2222 to gitlab-shell) spec: entrypoint: sweep-matrix onExit: notify-result @@ -44,7 +44,7 @@ spec: podMetadata: labels: app.kubernetes.io/part-of: foxhunt - app.kubernetes.io/component: backtest + app.kubernetes.io/component: train securityContext: fsGroup: 0 ttlStrategy: