Whitelist NS1 monitor subnets

rcsb · Sep 5, 2024 · 54823e2 · 54823e2
1 parent 8f760b6
commit 54823e2
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/k8s/helm/values.yaml b/k8s/helm/values.yaml
@@ -100,7 +100,10 @@ ingress:
   className: "haproxy"
   annotations:
     cert-manager.io/cluster-issuer: rutgers-acme
-    haproxy.org/allow-list: "128.6.158.0/23, 132.249.210.0/24, 132.249.213.0/24"
+    # The non-UCSD/Rutgers subnets are for NS1 monitors
+    haproxy.org/allow-list: >-
+      "128.6.158.0/23, 132.249.210.0/24, 132.249.213.0/24, 163.114.226.0/24, 163.114.225.0/24, 
+      209.177.156.77/32, 147.75.68.120/29, 163.114.227.0/24, 163.114.228.0/24, 163.114.224.0/24, 147.75.66.200/29"
   kubernetes.io/tls-acme: "true"
   hostsA:
     - host: idmapper-a.east.k8s.rcsb.org