2 Commits

Author	SHA1	Message	Date
tegwick	cf7abf56f4	feat(gitea-db): add NetworkPolicy for app-namespace ingress; update SCOPE ... - Add allow-ingress-from-default-gitea-db NetworkPolicy so Gitea pods in default namespace can connect to gitea-db cnpg cluster on 5432 - Update SCOPE.md to reflect cnpg as the canonical DB operator (postgresql-ha subchart fully decommissioned as of this session) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-27 03:06:23 +01:00
tegwick	e29f430b8d	feat(s3): add gitea-db NetworkPolicies and Valkey values template ... - gitea-db-networkpolicies.yaml: allow-egress-kube-api and allow-ingress-from-cnpg-operator for gitea-db cluster pods; required because databases namespace has default-deny-all policy and existing allow rules only covered net-kingdom-pg - valkey-values.sops.yaml.template: standalone Valkey Helm values template with Gitea connection string documentation - .gitignore: allow *-networkpolicies.yaml alongside *-cluster.yaml Fixes gitea-db initdb failure (T03); gitea-db cluster now healthy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-27 02:23:00 +01:00