fix(argo): lob-backtest-sweep pods need component=train for GitLab egress

Pods labeled `component: backtest` only match the `argo-base-egress`
NetworkPolicy (DNS, 443, MinIO, Mattermost). The ensure-binary step
needs SSH-to-gitlab-shell on port 2222, which is gated by
`argo-train-workflow` (selects `component=train`).

Relabel to `train` so the same NetworkPolicy that lets alpha-perception
clone the repo also covers lob-backtest-sweep. Egress shape (compile,
GPU run, PVC writes) is identical to a training run.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
jgrusewski
2026-05-19 12:24:22 +02:00
parent 84c32c0462
commit 0567d547ce

View File

@@ -35,7 +35,7 @@ metadata:
labels:
app.kubernetes.io/name: lob-backtest-sweep
app.kubernetes.io/part-of: foxhunt
app.kubernetes.io/component: backtest
app.kubernetes.io/component: train # reuses argo-train-workflow NetworkPolicy egress (port 2222 to gitlab-shell)
spec:
entrypoint: sweep-matrix
onExit: notify-result
@@ -44,7 +44,7 @@ spec:
podMetadata:
labels:
app.kubernetes.io/part-of: foxhunt
app.kubernetes.io/component: backtest
app.kubernetes.io/component: train
securityContext:
fsGroup: 0
ttlStrategy: