Date: 2026-03-20
Owner: ax_julian
Scope: Namespace autocoder-engine
Added an explicit NetworkPolicy egress allow rule for the Kubernetes API endpoint used by AutoCoder-Engine.
Created NetworkPolicy/allow-egress-kubernetes-api in namespace autocoder-engine.
Allowed destination:
192.168.1.9/326443Reason:
https://kubernetes.default.svc and 10.96.0.1:443 was timing out.192.168.1.9:6443 on this cluster.From the running AutoCoder-Engine pod after apply:
10.96.0.1:443 => reachable192.168.1.9:6443 => reachablekubernetes.default.svc:443 => reachablepods/log RBAC for system:serviceaccount:autocoder-engine:autocoder-engine => yeskubectl logs read for Deployment/autocoder-engine => successfulAutoCoder-Engine/k8s/04-network-policies.yamlThis change restores network reachability to the Kubernetes API. It does not alter RBAC.