fix(paperless-ngx): the egress rule names the Tika/Gotenberg pod ports, and CI now asserts it across charts #138

Merged
jklein merged 3 commits from fix/paperless-egress-pod-ports into main 2026-10-15 22:06:05 +02:00
Showing only changes of commit 95f3e8c1a1 - Show all commits
@@ -7,8 +7,9 @@ which in this repository are two other charts whose Services listen on port 80.
That last rule is derived from the switch rather than always rendered, so a That last rule is derived from the switch rather than always rendered, so a
release without Tika does not carry a rule that permits nothing. release without Tika does not carry a rule that permits nothing.
TWO THINGS THIS POLICY DOES NOT COVER, and both are real rather than THREE THINGS THIS POLICY DOES NOT COVER, and all three are real rather than
theoretical: theoretical (values.yaml lists the same three; this said "TWO" while listing
three, which is corrected here because the third one is the mail rule below):
1. THE VALKEY SUBCHART'S POD. This chart declares valkey as an optional 1. THE VALKEY SUBCHART'S POD. This chart declares valkey as an optional
dependency, and the subchart renders its own StatefulSet with its own dependency, and the subchart renders its own StatefulSet with its own