feat(k8s): Add Sentry and Harbor egress to NetworkPolicy (#38)

- Allow egress to 192.168.0.110:9000 (Sentry Self-Hosted)
- Allow egress to 192.168.0.110:5000 (Harbor Registry)
- Enables Sentry Tunnel API Route to forward errors

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
OG T
2026-03-24 17:51:06 +08:00
parent 490cd546cb
commit d08290b433

View File

@@ -107,6 +107,19 @@ spec:
- protocol: TCP
port: 8123
# 允許訪問 192.168.0.110 監控服務 (Harbor + Sentry)
# 2026-03-24 新增: Sentry Self-Hosted (透過 Sentry Tunnel API Route)
- to:
- ipBlock:
cidr: 192.168.0.110/32
ports:
# Sentry Self-Hosted HTTP API
- protocol: TCP
port: 9000
# Harbor Registry (已在 CD pipeline 使用)
- protocol: TCP
port: 5000
# 允許訪問 192.168.0.112 安全掃描服務
- to:
- ipBlock: