konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

feat(coredns): restrict kube-dns-lb ingress to the internal networks #1590

Merged
k.renner merged 1 commits from feat/kube-dns-lb-source-cidr into main 2026-11-07 10:31:17 +00:00
Conversation 0 Commits 1 Files Changed 2
+41
1 Commits
Author SHA1 Message Date
claude-botandClaude Opus 5.5 37dc17065d feat(coredns): restrict kube-dns-lb ingress to the internal networks
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details 
CoreDNS had no policy, so kube-dns-lb answered any source. The new CNP
allows the whole cluster on every port and the internal client networks
on 53/UDP+TCP. Selecting the pods makes them default-deny for ingress.

Refs S28-19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-07 11:19:37 +01:00