diff --git a/.github/workflows/build_test_ci.yml b/.github/workflows/build_test_ci.yml index dab977ec4..30e374f16 100644 --- a/.github/workflows/build_test_ci.yml +++ b/.github/workflows/build_test_ci.yml @@ -82,7 +82,7 @@ jobs: uses: step-security/harden-runner@v2 with: disable-sudo: true - egress-policy: audit + egress-policy: block allowed-endpoints: > api.linode.com:443 api.github.com:443 @@ -107,6 +107,8 @@ jobs: cloud.tilt.dev:443 kubernetes-sigs.github.io:443 charts.jetstack.io:443 + helm.cilium.io:443 + linode.github.io:443 - uses: actions/checkout@v4 diff --git a/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml b/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml index 2a61fda35..a1575a44f 100644 --- a/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml +++ b/e2e/default-CAPL-cluster/assert-child-cluster-resources.yaml @@ -50,39 +50,6 @@ kind: HelmReleaseProxy metadata: labels: cluster.x-k8s.io/cluster-name: ($cluster) - helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: linode-cloud-controller-manager -status: - conditions: - - type: Ready - status: "True" - - type: ClusterAvailable - status: "True" - - type: HelmReleaseReady - status: "True" - status: deployed ---- -apiVersion: addons.cluster.x-k8s.io/v1alpha1 -kind: HelmReleaseProxy -metadata: - labels: - cluster.x-k8s.io/cluster-name: ($cluster) - helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: cilium -status: - conditions: - - type: Ready - status: "True" - - type: ClusterAvailable - status: "True" - - type: HelmReleaseReady - status: "True" - status: deployed ---- -apiVersion: addons.cluster.x-k8s.io/v1alpha1 -kind: HelmReleaseProxy -metadata: - labels: - cluster.x-k8s.io/cluster-name: ($cluster) - helmreleaseproxy.addons.cluster.x-k8s.io/helmchartproxy-name: csi-driver-linode status: conditions: - type: Ready