farhoodliquor/irc

Archived

Author	SHA1	Message	Date
Chris Farhood	19b175dcf2	feat(irc): restrict ingress to gateway and thelounge Best Practices / Kube-score Analysis (push) Has been cancelled Details Best Practices / Polaris Audit (push) Has been cancelled Details Best Practices / Resource Usage Analysis (push) Has been cancelled Details Best Practices / PR Summary Report (push) Has been cancelled Details Best Practices / Polaris PR Review (push) Has been cancelled Details Security Scan / Trivy Security Scan (push) Has been cancelled Details Security Scan / Trivy PR Review (push) Has been cancelled Details Security Scan / Checkov IaC Scan (push) Has been cancelled Details Security Scan / Checkov PR Review (push) Has been cancelled Details Validate Manifests / Kustomize Build Test (push) Successful in 35s Details Validate Manifests / YAML Lint (push) Failing after 35s Details Validate Manifests / Kubernetes Schema Validation (push) Successful in 35s Details Add CiliumNetworkPolicy ingress rules so thelounge only accepts traffic from the cilium external gateway in gateway-system, and znc only from the thelounge pod. Allow host entity on both for kubelet probes. Switch znc service to ClusterIP and drop the external-dns annotation since direct external IRC client access is no longer desired.	2026-05-17 08:17:20 -04:00
Chris Farhood	2992d7d326	feat(thelounge): add cilium egress filtering Best Practices / Kube-score Analysis (push) Has been cancelled Details Best Practices / Polaris Audit (push) Has been cancelled Details Best Practices / Resource Usage Analysis (push) Has been cancelled Details Best Practices / PR Summary Report (push) Has been cancelled Details Best Practices / Polaris PR Review (push) Has been cancelled Details Validate Manifests / YAML Lint (push) Has been cancelled Details Security Scan / Trivy Security Scan (push) Has been cancelled Details Security Scan / Trivy PR Review (push) Has been cancelled Details Security Scan / Checkov IaC Scan (push) Has been cancelled Details Security Scan / Checkov PR Review (push) Has been cancelled Details Validate Manifests / Kustomize Build Test (push) Has been cancelled Details Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled Details Allow: DNS, LDAP (authentik), in-cluster ZNC, irc.passthepopcorn.me:6697. Default-deny for everything else. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-16 18:18:40 -04:00

2 Commits