Skip to content

Commit

Permalink
fix: allow more resources to access to the local registry as it's nec…
Browse files Browse the repository at this point in the history
…essary on cloud providers

Signed-off-by: Guilhem Barthés <[email protected]>
  • Loading branch information
guilhem-barthes committed May 29, 2024
1 parent 8f2f412 commit ec1927c
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions charts/substra-backend/templates/networkpolicy-registry.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,10 @@ spec:
app.kubernetes.io/part-of: {{ template "substra.name" . }}
role-registry-client: 'true'
# kaniko-function-xx send requests through the service, which changes the IP address calling the registry, preventing
# to connect as the connection doesn't come directly from the pod
# to connect as the connection doesn't come directly from the pod. Cloud provider also uses IPs whiwh are not part
# of the cluster to pull images
- ipBlock:
cidr: 10.0.0.0/8
cidr: 0.0.0.0/0
ports:
- protocol: TCP
port: {{ .Values.containerRegistry.port }}
Expand Down

0 comments on commit ec1927c

Please sign in to comment.