Aleksei Sviridkin 8a5cfbe1cb docs(harbor): say what managementWhitelist overrides and trusts ...

A per-Ingress whitelist-source-range replaces the controller-wide
default that the tenant ingress whitelist sets, so for the portal and
API the Harbor list is not an intersection: an address the tenant
policy excluded gets in when it is on this list.

The description also promised that every other path is restricted,
which holds only while the controller sees the real client address.
Behind a proxy or with a header-derived client address the check runs
against that instead.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-24 15:53:00 +03:00

..

types.go

docs(harbor): say what managementWhitelist overrides and trusts

2026-09-24 15:53:00 +03:00

zz_generated.deepcopy.go

feat(harbor): restrict the portal and API to listed source ranges

2026-09-24 14:56:57 +03:00