farhoodliquor/irc
Archived
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: drop istio mesh egress, use cilium FQDN for znc egress filtering
Best Practices / Kube-score Analysis (push) Has been cancelled
Details
Best Practices / Polaris Audit (push) Has been cancelled
Details
Best Practices / Resource Usage Analysis (push) Has been cancelled
Details
Best Practices / PR Summary Report (push) Has been cancelled
Details
Best Practices / Polaris PR Review (push) Has been cancelled
Details
Security Scan / Trivy Security Scan (push) Has been cancelled
Details
Security Scan / Trivy PR Review (push) Has been cancelled
Details
Security Scan / Checkov IaC Scan (push) Has been cancelled
Details
Security Scan / Checkov PR Review (push) Has been cancelled
Details
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Details
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
Details
Validate Manifests / YAML Lint (push) Has been cancelled
Details

Browse Source 
Istio ambient cannot do hostname-based egress filtering without L7
processing (waypoint/sidecar). Cilium FQDN CiliumNetworkPolicy is the
right tool — DNS-aware L3/L4 enforcement.

- Remove waypoint deployment and namespace/service label references
- Move TheLounge HTTPRoute back to Cilium external gateway
- Add CiliumNetworkPolicy for znc: allow DNS + irc.passthepopcorn.me:6697
- Remove orphaned znc/egress.yaml (Istio VirtualService routing)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Chris Farhood
2026-05-16 18:03:11 -04:00
parent 31e6864a2a
commit 84ee1fa8b8
8 changed files with 29 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
znc/kustomization.yaml
+1
View File
@@ -4,3 +4,4 @@ resources:
- statefulset.yaml
- service.yaml
- authorizationpolicy.yaml
- ciliumnetworkpolicy.yaml