From bbae6b64503a4fe61e8c07ac336e520fe5ce67ca Mon Sep 17 00:00:00 2001
From: jgrusewski <jgrusewski@localhost>
Date: Mon, 2 Mar 2026 00:04:06 +0100
Subject: [PATCH] fix(k8s): allow GitLab to access minio for artifact storage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 infra/k8s/network-policies/infrastructure.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/infra/k8s/network-policies/infrastructure.yaml b/infra/k8s/network-policies/infrastructure.yaml
index ca1d7bdc2..bb46aca24 100644
--- a/infra/k8s/network-policies/infrastructure.yaml
+++ b/infra/k8s/network-policies/infrastructure.yaml
@@ -50,7 +50,7 @@ spec:
         - protocol: TCP
           port: 6379
 ---
-# Minio: accepts connections from foxhunt app pods (S3 API)
+# Minio: accepts connections from foxhunt app pods + GitLab (S3 API)
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
@@ -69,6 +69,9 @@ spec:
               - key: app.kubernetes.io/part-of
                 operator: In
                 values: ["foxhunt"]
+        - podSelector:
+            matchLabels:
+              release: gitlab
       ports:
         - protocol: TCP
           port: 9000