allow alloy-upstream job to reach kube api