From 48a9d409a4ad1e5637ef7453dbac767c28e08f04 Mon Sep 17 00:00:00 2001 From: Luca Bruno Date: Fri, 21 Jun 2019 07:58:02 +0000 Subject: [PATCH] coreos-cincinnati: allow crates.io in egress policy This allows reaching crates.io, which is required at build-time in order to reach the dependency registry. Policy change has been acked by puiterwijk: https://matrix.to/#/!bcjmqdemgMWRaJJeva:matrix.org/$15611030891834087ceIcE:matrix.org?via=matrix.org&via=disroot.org&via=lisas.de Signed-off-by: Luca Bruno --- .../coreos-cincinnati/templates/egresspolicy.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml b/roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml index 08bf85fb02..ff9919f322 100644 --- a/roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml +++ b/roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml @@ -11,6 +11,9 @@ spec: - type: Allow to: dnsName: github.com + - type: Allow + to: + dnsName: crates.io - type: Allow to: dnsName: mirrors.fedoraproject.org