fix(coder): allow coder pod egress to ingress-nginx #8

2026-04-24T20:43:16Z

k.renner commented

2026-04-24 20:43:16 +00:00

Summary

Coder pods need egress to ingress-nginx for OIDC discovery (auth.renner.uno resolves to the LB, Cilium enforces at pod endpoint).
Matches audiobookshelf-ns.yaml.

Test plan

curl https://coder.renner.uno/api/v2/buildinfo from a pod in the coder namespace returns 200

## Summary - Coder pods need egress to ingress-nginx for OIDC discovery (`auth.renner.uno` resolves to the LB, Cilium enforces at pod endpoint). - Matches `audiobookshelf-ns.yaml`. ## Test plan - [ ] `curl https://coder.renner.uno/api/v2/buildinfo` from a pod in the `coder` namespace returns 200

k.renner added 1 commit 2026-04-24 20:43:16 +00:00

fix(coder): allow coder pod egress to ingress-nginx 0de50c2a50

Coder pods initiate OIDC discovery against auth.renner.uno, which
resolves to the ingress-nginx LB. Cilium policy evaluates destination
at the pod endpoint, not the LB VIP, so we need to explicitly allow
egress to the ingress-nginx endpoint. Matches audiobookshelf-ns.yaml.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

k.renner merged commit 98ea586de2 into master

2026-04-24 20:43:17 +00:00

k.renner referenced this issue from a commit

2026-04-24 20:43:19 +00:00

Merge pull request 'fix(coder): allow coder pod egress to ingress-nginx' (#8) from coder-migration into master

k.renner referenced this pull request

2026-06-29 19:24:02 +00:00

HA: git config-sync sidecar (auto-deploy /config from main) #87

claude-bot referenced this pull request

2026-09-24 15:01:14 +00:00

chore(wiki): image build.1790261926 (facts, questions, lab) #950

Ghost referenced this issue from a commit