From 91015832b8f9c50f4bcb2d2f2e24395cb83e8ba5 Mon Sep 17 00:00:00 2001 From: Anatolii Bazko Date: Thu, 22 Oct 2026 16:59:21 +0200 Subject: [PATCH] fix: allow OpenShift console ingress in default NetworkPolicy for WebTerminal Add the openshift-console namespace (selected via the network.openshift.io/policy-group=console label) to the default NetworkPolicy ingress peers so that the OpenShift console can reach WebTerminal workspaces. Co-Authored-By: Claude Code Assisted-by: Claude Code Signed-off-by: Anatolii Bazko --- pkg/config/defaults.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/pkg/config/defaults.go b/pkg/config/defaults.go index 7a071892c..e65450ada 100644 --- a/pkg/config/defaults.go +++ b/pkg/config/defaults.go @@ -174,6 +174,12 @@ var ( {NamespaceSelector: &metav1.LabelSelector{MatchLabels: map[string]string{"policy-group.network.openshift.io/host-network": ""}}}, }, }, + { + // Needed for WebTerminal + From: []networkingv1.NetworkPolicyPeer{ + {NamespaceSelector: &metav1.LabelSelector{MatchLabels: map[string]string{"network.openshift.io/policy-group": "console"}}}, + }, + }, } )