https://kukie.tech/tags/postgresql/Recent content in Postgresql on HistoryHugoko-krFri, 30 Oct 2026 09:00:00 +0900https://kukie.tech/posts/network-k8s-04-3/Fri, 30 Oct 2026 09:00:00 +0900https://kukie.tech/posts/network-k8s-04-3/Having a path is not the same as being allowed to use it — a three-Pod lab (diagnostic, Go web server, PostgreSQL) shows what a NetworkPolicy really is: a per-Pod, per-direction allow list where both the sender’s egress door and the receiver’s ingress door must open, allow rules only add up, an empty selector, an empty list and an empty rule mean three different things, a hyphen in YAML decides AND versus OR, and the standard API stops at the TCP port while Cilium’s Envoy can refuse a single HTTP path with a 403.