Allow user-engine egress to email-connect; record T04 hand-back.

NetworkPolicy egress to email-connect:8080 for transactional invitation send; NK-WP-0024 note points at EMAIL-WP-0004 failure evidence.
2026-08-12 13:32:11 +02:00 · 2026-08-12 13:32:11 +02:00 · 20d4d8af04
commit 20d4d8af04
parent ea6cc01872
2 changed files with 16 additions and 0 deletions
--- a/sso-mfa/k8s/user-engine/runtime.yaml
+++ b/sso-mfa/k8s/user-engine/runtime.yaml
@ -144,6 +144,13 @@ spec:
          podSelector:
            matchLabels: {app.kubernetes.io/name: flex-auth-user-engine}
      ports: [{protocol: TCP, port: 8080}]
+    # EMAIL-WP-0004 transactional invitation/verification send path.
+    - to:
+        - namespaceSelector:
+            matchLabels: {kubernetes.io/metadata.name: email-connect}
+          podSelector:
+            matchLabels: {app.kubernetes.io/name: email-connect}
+      ports: [{protocol: TCP, port: 8080}]
    - to:
        - namespaceSelector:
            matchLabels: {kubernetes.io/metadata.name: kube-system}