Allow YugabyteDB port 5433 in kamowssecurity Cilium egress

Shipped

August 10, 2026 at 4:07 AM UTC

Author

Kamo

Commit

7e181e7

A CiliumNetworkPolicy selecting app=kamowssecurity allowed host/remote-node egress on 26257, 4222 and 9000 only. After the cutover the database moved to 5433 and the policy silently dropped the traffic -- surfacing as a Hikari SocketTimeoutException, indistinguishable from the database being down. Every other service was unaffected because this is the only pod with a CNP. Also replaces the CockroachDB backup CronJob with ysql_dump against YugabyteDB.