OG T 725392b578 fix(k8s): NetworkPolicy 繞過 kustomize commonLabels ...

問題: kustomize commonLabels 會加到 NetworkPolicy egress[].to[].podSelector
      導致 DNS rule 要求 CoreDNS pods 有 system:awoooi + environment:prod
      但 CoreDNS 只有 k8s-app:kube-dns，造成 DNS 解析失敗

修復:
- kustomization.yaml: 移除 02-network-policy.yaml
- cd.yaml: 新增 Apply NetworkPolicy step 單獨套用

2026-03-29 ogt: 根本原因修復

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-03-29 01:27:29 +08:00

..

workflows

fix(k8s): NetworkPolicy 繞過 kustomize commonLabels

2026-03-29 01:27:29 +08:00