Skip to main content

Browse the archive

Revision 24061be70360e31137d23fec08dc637e4393b03c authored by Nick Young on 11 June 2024, 06:03:27 UTC, committed by Tam Mach on 18 June 2024, 01:51:16 UTC 
Fix CiliumEnvoyConfig Nodeport handling
 
Adds additional service redirect handling for Services with
Nodeports set, which will automatically include the Nodeport
in the set of redirected ports if ports to redirect are
specified.

Also removes a hack in the Dedicated Ingress code that was
introduced to solve this problem previously.

Signed-off-by: Nick Young <nick@isovalent.com>
1 parent 1defd4c
Raw File
.clomonitor.yml 
# CLOMonitor metadata file

exemptions:
  - check: slack_presence
    reason: "The Cilium slack community can be found at http://slack.cilium.io/" # Justification of this exemption

  - check: dangerous_workflow
    reason: >
      "It is safe to run code checkout '${{ github.event.pull_request.head.sha }}' 
      and 'github.event.pull_request.head.ref' in .github/workflows/build-images-base.yaml 
      as this workflow is only permitted to be executed after an explicit approval of a 
      subset of committers."

  - check: signed_releases
    reason: >
      "All Cilium release images are cryptographically signed during build by cosign. 
      Images are hosted in Quay. OpenSSF Scorecard check is currently limited to repositories 
      hosted on GitHub, and does not support other source hosting repositories."

  - check: token_permissions
    reason: >
      "Reason to use every non-read-only token in GitHub workflows is commented in the respective workflow files."
back to top