fix: allow CI runner egress to K8s API server #48

Merged
rock merged 1 commits from feat/ci-k8s-api-egress into main 2026-09-13 13:54:32 +00:00
1 Commits
Author SHA1 Message Date
rock 9e17ca4d44 fix: allow CI runner egress to K8s API server (port 6443)
CI needs kubectl access to create Tekton PipelineRuns for integration
testing. The API server runs on control-plane nodes in 192.168.1.0/24
which was blocked by the existing except rule.

Allow port 6443 to 192.168.1.0/24 (control-plane subnet only).
2026-09-13 22:51:36 +09:00