fix(infra): admit tailscale proxy to minio ingress netpol (minio.fxhnt.ai S3 API)

minio.fxhnt.ai returned 000 — proxy not in minio's ingress allow-list. Same pattern as gitea/postgres. Now reachable over the tailnet (health 200).
2026-06-21 18:01:41 +02:00
parent 35e4078989
commit e86384ff99
1 changed files with 3 additions and 0 deletions
--- a/infra/k8s/network-policies/infrastructure.yaml
+++ b/infra/k8s/network-policies/infrastructure.yaml
@@ -81,6 +81,9 @@ spec:
        - podSelector:
            matchLabels:
              app.kubernetes.io/name: minio-init
+        - podSelector:                              # tailscale proxy fronts minio.fxhnt.ai (S3 API)
+            matchLabels:
+              app.kubernetes.io/name: tailscale-gitlab-proxy
      ports:
        - protocol: TCP
          port: 9000