Allow YugabyteDB port 5433 in kamowssecurity Cilium egress

Shipped

10 ஆகஸ்ட், 2026 அன்று 4:07 AM UTC

Author

Kamo

Commit

8b97747

A CiliumNetworkPolicy selecting app=kamowssecurity allowed host/remote-node egress on 26257, 4222 and 9000 only. After the cutover the database moved to 5433 and the policy silently dropped the traffic -- surfacing as a Hikari SocketTimeoutException, indistinguishable from the database being down. Every other service was unaffected because this is the only pod with a CNP. Also replaces the CockroachDB backup CronJob with ysql_dump against YugabyteDB.