From 171205d00f4d040a9636d21e30cd61c1016f38e8 Mon Sep 17 00:00:00 2001
From: Waldemar Majkowski <wmajkowski@ecovadis.com>
Date: Fri, 18 Sep 2026 14:38:55 +0200
Subject: [PATCH] Add TCP port 53 to egress network policy

Allow TCP DNS queries alongside existing UDP 53 in both the kube-dns
and outside-world egress blocks, for DNS responses that exceed the
UDP size limit.
---
 charts/core/templates/network-policy.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/charts/core/templates/network-policy.yaml b/charts/core/templates/network-policy.yaml
index f676859..6beb36a 100644
--- a/charts/core/templates/network-policy.yaml
+++ b/charts/core/templates/network-policy.yaml
@@ -67,6 +67,8 @@ spec:
       ports:
         - port: 53
           protocol: UDP
+        - port: 53
+          protocol: TCP
 
   {{- if .Values.global.allowAllInternalClusterTrafficNetworkPolicy }}
     - to:
@@ -100,6 +102,8 @@ spec:
         - port: 8200
         - port: 53
           protocol: UDP
+        - port: 53
+          protocol: TCP
   {{- if .Values.global.elasticNetworkPolicyEnabled }}
         - port: 9243  #elasticcloud
   {{- end }}