dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

gw1/squid: Allow to Gitea kicstarts+from p.r 

Since the canonical location for Anaconda kickstart scripts is now
Gitea, we need to allow hosts to access them from there.

Also allowing access from the _pyrocufflink.red_ network for e.g.
installation testing.
dynamic-inventory
Dustin 2024-12-27 13:07:11 -06:00
parent e51e933661
commit 81663a654d
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
host_vars/gw1.pyrocufflink.blue/squid.yml
View File

@ -14,6 +14,7 @@ squid_acl:
- src 172.30.0.0/26 - src 172.30.0.0/26
- src 172.30.0.211/32 - src 172.30.0.211/32
- src 172.30.0.214/32 - src 172.30.0.214/32
- src 172.31.1.0/24
kubernetes: kubernetes:
- src 172.30.0.160/28 - src 172.30.0.160/28
unifi_controller: unifi_controller:
@ -31,6 +32,7 @@ squid_acl:
- dstdomain api.github.com - dstdomain api.github.com
kickstart: kickstart:
- url_regex rosalina.pyrocufflink.blue/~dustin/kickstart/.*\.ks$ - url_regex rosalina.pyrocufflink.blue/~dustin/kickstart/.*\.ks$
- url_regex git.pyrocufflink.net/infra/kickstart/raw/.*/.*\.ks$
fcos_updates: fcos_updates:
- dstdomain d2uk5hbyrobdzx.cloudfront.net - dstdomain d2uk5hbyrobdzx.cloudfront.net
- dstdomain ostree.fedoraproject.org - dstdomain ostree.fedoraproject.org