Status
What this pod can reach, checked just now.
| Redis (managed, private network) | OK {"ok":true,"host":"172.16.40.4"} |
| Varnish → Drupal (JSON:API) | OK {"ok":true,"status":200,"cache":"HIT","url":"http://varnish"} |
| OpenSearch (read) | OK {"ok":true,"status":"yellow","nodes":1} |
| OpenSearch write — MUST be refused | OK {"blocked":true,"status":403} |
The last row is inverted on purpose: a green “OK” there means the write was refused with 403. Next.js authenticates as the read-only account, and a NetworkPolicy cannot enforce that difference — it admits a pod to the port or it does not, and a search is a POST just like a delete is.
pod
nextjs-856c764f7f-c245w