fix: NetworkPolicy egress complet (Postgres + Keycloak + Kafka si besoin)

values.yaml

@@ -127,11 +127,9 @@ lions-app:
 
   # --------------------------------------------------------
   # NetworkPolicy
-  # TEMPORAIREMENT DÉSACTIVÉE : à reactiver après validation POC et affinage
-  # des règles egress (notamment egress vers node IP pour OIDC public URL)
   # --------------------------------------------------------
   networkPolicy:
-    enabled: false
+    enabled: true
     allowIngressFrom:
       - namespaceSelector:
           kubernetes.io/metadata.name: ingress-nginx
@@ -140,28 +138,21 @@ lions-app:
     allowEgressDNS: true
     allowEgressKubeAPI: true
     allowEgressTo:
-      # PostgreSQL
       - namespaceSelector:
           kubernetes.io/metadata.name: postgresql
         ports:
           - port: 5432
             protocol: TCP
-      # Kafka
-      - namespaceSelector:
-          kubernetes.io/metadata.name: kafka
-        ports:
-          - port: 9092
-            protocol: TCP
-      # Keycloak
       - namespaceSelector:
           kubernetes.io/metadata.name: keycloak
         ports:
           - port: 8080
             protocol: TCP
-
-  # --------------------------------------------------------
-  # Probes Quarkus SmallRye Health
-  # --------------------------------------------------------
+      - namespaceSelector:
+          kubernetes.io/metadata.name: kafka
+        ports:
+          - port: 9092
+            protocol: TCP
   probes:
     liveness:
       enabled: true