UNCLASSIFIED - NO CUI

Skip to content

Draft: TEST ONLY DO NOT MERGE Resolve "GitLab runner not passing control plane cidr"

Package Merge Request

Package Changes

The BB level value of networkPolicies.controlPlaneCidr passes down to app netpols via default values per app in their respective BB template subdirectories, but gitlab-runner is missing this default value

Also, the associated network policy includes a rule to allow all traffic to the gitlab namespace, but all other applications have a dedicated kube-api egress and this one should as well, as the current multi-element rule allows all traffic to the gitlab namespace or the default cidr (0.0.0.0/0 if not configured directly in the gitlab runner values).

Suggested action is to fix the gitlab runner BB level values, break the netpol into its own dedicated kube api netpol and create a new netpol for gitlab-runner > gitlab communication. (Include any relevant logs/screenshots)

Package MR

big-bang/product/packages/gitlab-runner!155 (closed)

For Issue

#1931 (closed)

Upgrade Notices

N/A

Merge request reports