fix(EgressFirewall): Quay

ArthurVardevanyan · Dec 26, 2024 · 8324e0d · 8324e0d
1 parent becd056
commit 8324e0d
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/kubernetes/container-security/overlays/okd/egress-firewall.yaml b/kubernetes/container-security/overlays/okd/egress-firewall.yaml
@@ -13,6 +13,9 @@ spec:
             node-role.kubernetes.io/control-plane: ""
     # https://www.cloudflare.com/ips/
     # Cloudflare IP Ranges
+    - type: Allow
+      to:
+        cidrSelector: 104.16.0.0/13
     - type: Allow
       to:
         cidrSelector: 104.24.0.0/14

diff --git a/kubernetes/quay/overlays/okd/egress-firewall.yaml b/kubernetes/quay/overlays/okd/egress-firewall.yaml
@@ -16,6 +16,12 @@ spec:
         dnsName: truenas.arthurvardevanyan.com
     # https://www.cloudflare.com/ips/
     # Cloudflare IP Ranges
+    - type: Allow
+      to:
+        dnsName: production.cloudflare.docker.com
+    - type: Allow
+      to:
+        cidrSelector: 104.16.0.0/13
     - type: Allow
       to:
         cidrSelector: 104.24.0.0/14

diff --git a/kubernetes/version-checker/overlays/okd/egress-firewall.yaml b/kubernetes/version-checker/overlays/okd/egress-firewall.yaml
@@ -13,9 +13,13 @@ spec:
             node-role.kubernetes.io/control-plane: ""
     # https://www.cloudflare.com/ips/
     # Cloudflare IP Ranges
+    - type: Allow
+      to:
+        cidrSelector: 104.16.0.0/13
     - type: Allow
       to:
         cidrSelector: 104.24.0.0/14
+
     # Amazon IP Range
     # https://ip-ranges.amazonaws.com/ip-ranges.json
     - type: Allow