selenium: allow github-runner namespace ingress on 4444 #26

Merged
bluejay merged 1 commits from ops/selenium-allow-github-runner-2026-05-25 into main 2026-05-26 00:44:25 +00:00
Owner

Unblocks CI jobs running in github-runner pods (e.g. FlowerCore.Print.Web help-screenshots) from reaching selenium-hub.

Without this allow, the session POST to selenium-hub.selenium.svc.cluster.local:4444 was DNAT'd to the hub pod IP and dropped at the Calico ingress hook � Selenium UI showed 0/4 sessions while the .NET HTTP client timed out at 60s.

Same family as feedback_netpol_dnat_backend_port, wrong-source-namespace flavor.

Test plan

  • ArgoCD reconciles infra-selenium
  • kubectl exec in a github-runner pod: curl http://selenium-hub.selenium.svc.cluster.local:4444/status returns 200
  • Re-run FlowerCore.Print.Web help-screenshots job
Unblocks CI jobs running in github-runner pods (e.g. FlowerCore.Print.Web `help-screenshots`) from reaching selenium-hub. Without this allow, the session POST to `selenium-hub.selenium.svc.cluster.local:4444` was DNAT'd to the hub pod IP and dropped at the Calico ingress hook � Selenium UI showed 0/4 sessions while the .NET HTTP client timed out at 60s. Same family as `feedback_netpol_dnat_backend_port`, wrong-source-namespace flavor. ## Test plan - [ ] ArgoCD reconciles `infra-selenium` - [ ] `kubectl exec` in a github-runner pod: `curl http://selenium-hub.selenium.svc.cluster.local:4444/status` returns 200 - [ ] Re-run FlowerCore.Print.Web `help-screenshots` job
bluejay added 1 commit 2026-05-26 00:44:04 +00:00
Unblocks CI jobs running in github-runner pods (e.g. FlowerCore.Print.Web
`help-screenshots`) from reaching selenium-hub. Previously the session
POST was DNAT'd to the hub pod IP then dropped at the Calico ingress
hook, surfacing as a 60s timeout against
http://selenium-hub.selenium.svc.cluster.local:4444 while the Selenium
UI showed 0/4 sessions.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
bluejay merged commit bc28430d24 into main 2026-05-26 00:44:25 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bluejay/bluejay-infra#26