middleware-lanonly.yaml 433 B

12345678910111213141516
  1. # Without this, internal services would be accessible by forcing resolution of
  2. # an internal domain into the external IP. Eg:
  3. #
  4. # curl -v --resolve sonarr.lan.jibby.org:443:<external IP> https://sonarr.lan.jibby.org
  5. #
  6. ---
  7. apiVersion: traefik.io/v1alpha1
  8. kind: Middleware
  9. metadata:
  10. name: lanonly
  11. namespace: kube-system
  12. spec:
  13. ipWhiteList:
  14. sourceRange:
  15. - 172.16.69.0/24 # LAN access
  16. - 10.42.0.0/16 # Pod access