scottk/Biohazard
1
0
Fork 0
mirror of https://github.com/outbackdingo/Biohazard.git synced 2026-03-22 12:39:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ingress-nginx): allow Let's Encrypt egress traffic

Browse Source
This commit is contained in:
JJGadgets
2024-09-03 04:19:29 +08:00
parent 2f4bb76b44
commit f7f992bb2d
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kube/deploy/core/ingress/ingress-nginx/app/netpol.yaml
View File

@@ -104,6 +104,10 @@ spec:
- toFQDNs:
- matchPattern: "*.${DNS_MAIN}"
- matchPattern: "*.${DNS_SHORT}"
# allow Let's Encrypt traffic for e.g. OCSP or CRLs
- toFQDNs:
- matchPattern: "*.lencr.org"
- matchPattern: "*.*.lencr.org"
# DNS proxy to kube-dns, DNS L7 visibility
- toEndpoints:
- matchLabels: