fix(paperless-ngx): the egress rule names the Tika/Gotenberg pod ports, and CI now asserts it across charts #138

Merged
jklein merged 3 commits from fix/paperless-egress-pod-ports into main 2026-10-15 22:06:05 +02:00
Showing only changes of commit 95f3e8c1a1 - Show all commits
@@ -7,8 +7,9 @@ which in this repository are two other charts whose Services listen on port 80.
That last rule is derived from the switch rather than always rendered, so a
release without Tika does not carry a rule that permits nothing.
TWO THINGS THIS POLICY DOES NOT COVER, and both are real rather than
theoretical:
THREE THINGS THIS POLICY DOES NOT COVER, and all three are real rather than
theoretical (values.yaml lists the same three; this said "TWO" while listing
three, which is corrected here because the third one is the mail rule below):
1. THE VALKEY SUBCHART'S POD. This chart declares valkey as an optional
dependency, and the subchart renders its own StatefulSet with its own