gitea_admin/Homelabv4
1
0
Fork 0
mirror of https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git synced 2026-08-21 05:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow kube-apiserver webhook calls to netbird namespace

Browse Source 
The netbird-operator webhook service runs in the netbird namespace and
receives admission webhook calls from kube-apiserver using node IPs
(172.28.101.0/24). Without this, ztunnel rejects the connections with
"allow policies exist, but none allowed".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Scooby Husky
2026-03-10 22:09:55 -05:00
co-authored by Claude Opus 4.6
parent 511ba55b30
commit 64723eb0ba
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/istio/manifests/mesh/authorization-policies.yaml
+5
View File
@@ -280,6 +280,11 @@ spec:
- source: - source:
namespaces: namespaces:
- prometheus - prometheus
# kube-apiserver webhook calls to netbird-operator webhook service (node IPs)
- from:
- source:
ipBlocks:
- "172.28.101.0/24"
--- ---
# --- Netbird Operator: Allow intra-namespace + Prometheus --- # --- Netbird Operator: Allow intra-namespace + Prometheus ---